Multiple security vulnerabilities in the Adobe Reader may allow remote unprivileged users to execute arbitrary code. This includes a cross-site scripting (XSS) vulnerability that may allow a remote unprivileged user to inject arbitrary JavaScript into a browser session.

Note: Adobe Reader is the free viewing companion to Adobe Acrobat. Adobe Reader allows you to view, navigate, and print Portable Document Format (PDF) files.

These issues have been described in the following documents:

• APSB07-01 at: http://www.adobe.com/support/security/bulletins/apsb07-01.html  
• CVE-2006-5857 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5857
• CVE-2007-0045 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0045
• CVE-2007-0046 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0046