VULNERABILITY INTELLIGENCE

CVE-2007-5666

CVSS score6.2 MEDIUM
EPSS probability1.37%
CISA KEVNot currently listed
Published2008-02-12
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references