CVE-2005-1306: Adobe Acrobat

High severity, CVSS 7.5. EPSS: 14.5% chance of exploitation in the next 30 days.

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

Affected products

• Adobe Acrobat: version 7.0 only; version 7.0.1 only
• Adobe Acrobat Reader: version 7.0 only; version 7.0.1 only

Published 2005-06-15. Last modified 2026-06-16.