CVE-2007-0046: Adobe Acrobat Reader

High severity, CVSS 7.5. EPSS: 56.8% chance of exploitation in the next 30 days.

Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.

Affected products

• Adobe Acrobat Reader: up to and including 7.0.8

Published 2007-01-03. Last modified 2026-06-16.