CVE-2007-1199

CVE-2007-1199 describes an information disclosure vulnerability in Adobe Reader and Acrobat Trial versions. Remote attackers can exploit this flaw by embedding a file:// URI within a PDF document, allowing them to read arbitrary local files on the victim's system. The vulnerability has a CVSS score of 4.3, indicating a medium severity, and requires user interaction (medium attack complexity) but does not require authentication. While not listed on the CISA KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.