CVE-2005-1306 EXPLOIT
7.5
HIGH · CVSS 3.1 · EPSS 14.5% (pctl 97)
Patch early
A public exploit exists.
Description
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
Scoring
| CVSS | 7.5 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| EPSS | 14.53% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-611 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-06-15 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| adobe | acrobat |
| adobe | acrobat reader |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure | 2005-06-15 |
References
→ the Explorer · watch your stack · NVD