Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Adobe Acrobat Reader Plugin 多个CRLF跨站脚本伪造攻击漏洞
Vulnerability Description
Adobe Acrobat Reader是Adobe公司开发的一款优秀的PDF文档阅读软件。 Adobe Acrobat Reader Plugin 8.0.0之前版本中存在CRLF注入攻击漏洞。当和Microsoft.XMLHTTP ActiveX object一起在Internet Explorer中使用时，远程攻击者可以借助(1)FDF,(2)XML或(3)XFDF AJAX请求参数中的javascript:URI里的CRLF序列，注入任意的HTTP头和执行HTTP响应进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A