DOM-Based Cross-Site Scripting Flaw in Adobe Acrobat Chrome Extension
CVE-2017-2929
6.1MEDIUM
Key Information:
- Vendor
Adobe
- Vendor
- CVE Published:
- 24 January 2017
What is CVE-2017-2929?
The Adobe Acrobat Chrome extension prior to version 15.1.0.3 is susceptible to a DOM-based cross-site scripting vulnerability. This security flaw allows attackers to inject and execute arbitrary JavaScript code within the context of the affected browser. Exploitation of this vulnerability could enable malicious actions, such as cookie theft or phishing attacks, targeting users who have the extension installed.
Affected Version(s)
Adobe Acrobat Extension for Chrome 15.1.0.3 Adobe Acrobat Extension for Chrome 15.1.0.3