Adobe Acrobat Reader Plugin PDF cross-site request forgery (HTML_Pdf_XSS)

About this signature or vulnerability

Proventia Network IPS, Proventia Desktop, RealSecure Desktop, Proventia Network IDS, Proventia-G 1.1 and earlier, IBM Security Server Protection for Windows, Proventia Network MFS, RealSecure Server Sensor, RealSecure Network, BlackICE PC Protection, BlackICE Server Protection, Virtual Server Protection for Vmware, Proventia Server IPS for Linux technology:

This signature detects '.pdf#' followed by 'javascript:' in a URI

Default risk level

 High

Sensors that have this signature

Proventia Network IPS: XPU 1.94, Proventia Desktop: 1950, RealSecure Desktop: eqa, Proventia Network IDS: XPU 24.55, Proventia-G 1.1 and earlier: XPU 24.55, IBM Security Server Protection for Windows: 2.1.14.2400, IBM Security Server Protection for Windows: 1.0.914.1950, Proventia Network MFS: XPU 1.94, RealSecure Server Sensor: XPU 24.55, RealSecure Network: XPU 24.55, BlackICE PC Protection: 3.6cqa, BlackICE Server Protection: 3.6.cqa, Virtual Server Protection for Vmware: 1.0, Proventia Server IPS for Linux technology: 1.94

Systems affected

Gentoo Linux, SuSE Linux Enterprise Server: 8, Adobe Acrobat Reader: 6.0.1, SuSE SuSE SLES: 9, Adobe Acrobat Reader: 6.0, Adobe Acrobat Reader: 6.0.2, Novell Linux Desktop: 9, Adobe Acrobat Reader: 7.0, Adobe Acrobat Reader: 7.0.1, Adobe Acrobat Reader: 7.0.2, SUSE SuSE Linux: 10.0, RedHat RHEL Extras: 3, RedHat RHEL Extras: 4, SUSE SuSE Linux: 10.1, SuSE SuSE SLED: 10, Adobe Acrobat 3D, RedHat RHEL Desktop Supplementary: 5 Client, RedHat RHEL Supplementary: 5 Server, Adobe Acrobat Reader: 6.0.3, Adobe Acrobat Reader: 6.0.4, Adobe Acrobat Reader: 6.0.5, Adobe Acrobat Reader: 7.0.3, Adobe Acrobat Reader: 7.0.4, Adobe Acrobat Reader: 7.0.5, Adobe Acrobat Reader: 7.0.6, Adobe Acrobat Reader: 7.0.7, Adobe Acrobat Reader: 7.0.8, Novell OpenSUSE: 10.2, SUSE SuSE Linux: 9.3, Adobe Acrobat Reader Plugin: 7.0.8, Adobe Acrobat: 7.0 Standard, Adobe Acrobat: 7.0 Professional, Adobe Acrobat: 7.0.1 Standard, Adobe Acrobat: 7.0.1 Professional, Adobe Acrobat: 7.0.2 Standard, Adobe Acrobat: 7.0.2 Professional, Adobe Acrobat: 7.0.3 Standard, Adobe Acrobat: 7.0.3 Professional, Adobe Acrobat: 7.0.4 Standard, Adobe Acrobat: 7.0.4 Professional, Adobe Acrobat: 7.0.5 Standard, Adobe Acrobat: 7.0.5 Professional, Adobe Acrobat: 7.0.6 Standard, Adobe Acrobat: 7.0.6 Professional, Adobe Acrobat: 7.0.7 Standard, Adobe Acrobat: 7.0.7 Professional, Adobe Acrobat: 7.0.8 Standard, Adobe Acrobat: 7.0.8 Professional, Adobe Acrobat Elements: 7.0.8

Type

Unauthorized Access Attempt

Vulnerability description

How to remove this vulnerability

References