CVE-2007-1377: Adobe Acrobat Reader

Medium severity, CVSS 5.0. EPSS: 18.1% chance of exploitation in the next 30 days.

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

Affected products

• Adobe Acrobat Reader: version 8.0 only
• Mozilla Firefox: version 2.0.0.3 only
• Netscape Navigator: any version
• Opera Opera Browser: version 9.2 only

Published 2007-03-10. Last modified 2026-06-16.