The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Link | Tags |
---|---|
http://securitytracker.com/id?1013890 | vdb entry third party advisory broken link |
http://www.adobe.com/support/techdocs/323585.html | patch broken link |
http://secunia.com/advisories/15255 | broken link third party advisory vendor advisory |
http://www.hyperdose.com/advisories/H2005-07.txt | exploit patch broken link |