CVE-2005-0918 Information disclosure in n/a
Remote attackers can determine the existence of arbitrary local files via the Adobe SVG Viewer ActiveX control in Internet Explorer.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2005-0918?
CVE-2005-0918 is a medium-severity vulnerability in n/a, published on 5 May 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.
Weakness: CWE-203
Which versions are affected by CVE-2005-0918?
It affects 1 product.
Products include Adobe Svg Viewer.
How do I fix CVE-2005-0918?
No fix has been published for CVE-2005-0918 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-0918 being exploited?
There is no known exploitation of CVE-2005-0918 in the wild and no public exploit code.
Sources
Also known as GHSA-j6jw-vv8w-q769.