csaf_redhat - rhsa-2008

rhsa-2008_0974

Vulnerability from csaf_redhat

Published

2008-11-12 17:26

Modified

2024-11-14 10:06

Summary

Red Hat Security Advisory: acroread security update

Notes

Topic

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details

Adobe Reader allows users to view and print documents in Portable Document Format (PDF). Several input validation flaws were discovered in Adobe Reader. A malicious PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader. (CVE-2008-2549, CVE-2008-2992, CVE-2008-4812, CVE-2008-4813, CVE-2008-4814, CVE-2008-4817) The Adobe Reader binary had an insecure relative RPATH (runtime library search path) set in the ELF (Executable and Linking Format) header. A local attacker able to convince another user to run Adobe Reader in an attacker-controlled directory could run arbitrary code with the privileges of the victim. (CVE-2008-4815) All acroread users are advised to upgrade to these updated packages, that contain Adobe Reader version 8.1.3, and are not vulnerable to these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated acroread packages that fix various security issues are now\navailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4\nExtras, and Red Hat Enterprise Linux 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Adobe Reader allows users to view and print documents in Portable Document\nFormat (PDF).\n\nSeveral input validation flaws were discovered in Adobe Reader. A malicious\nPDF file could cause Adobe Reader to crash or, potentially, execute\narbitrary code as the user running Adobe Reader. (CVE-2008-2549,\nCVE-2008-2992, CVE-2008-4812, CVE-2008-4813, CVE-2008-4814, CVE-2008-4817)\n\nThe Adobe Reader binary had an insecure relative RPATH (runtime library\nsearch path) set in the ELF (Executable and Linking Format) header. A local\nattacker able to convince another user to run Adobe Reader in an\nattacker-controlled directory could run arbitrary code with the privileges\nof the victim. (CVE-2008-4815)\n\nAll acroread users are advised to upgrade to these updated packages, that\ncontain Adobe Reader version 8.1.3, and are not vulnerable to these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0974",
        "url": "https://access.redhat.com/errata/RHSA-2008:0974"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#critical",
        "url": "http://www.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "450078",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=450078"
      },
      {
        "category": "external",
        "summary": "469875",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469875"
      },
      {
        "category": "external",
        "summary": "469876",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469876"
      },
      {
        "category": "external",
        "summary": "469877",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469877"
      },
      {
        "category": "external",
        "summary": "469880",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469880"
      },
      {
        "category": "external",
        "summary": "469882",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469882"
      },
      {
        "category": "external",
        "summary": "469923",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469923"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0974.json"
      }
    ],
    "title": "Red Hat Security Advisory: acroread security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:06:43+00:00",
      "generator": {
        "date": "2024-11-14T10:06:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2008:0974",
      "initial_release_date": "2008-11-12T17:26:00+00:00",
      "revision_history": [
        {
          "date": "2008-11-12T17:26:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-11-12T12:26:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:06:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
                  "product_id": "5Client-Supplementary",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
                  "product_id": "5Server-Supplementary",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4 Extras",
                  "product_id": "4AS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 4 Extras",
                "product": {
                  "name": "Red Hat Desktop version 4 Extras",
                  "product_id": "4Desktop-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4 Extras",
                  "product_id": "4ES-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4 Extras",
                  "product_id": "4WS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3 Extras",
                  "product_id": "3AS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3 Extras",
                "product": {
                  "name": "Red Hat Desktop version 3 Extras",
                  "product_id": "3Desktop-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3 Extras",
                  "product_id": "3ES-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3 Extras",
                  "product_id": "3WS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "acroread-0:8.1.3-1.el5.i386",
                "product": {
                  "name": "acroread-0:8.1.3-1.el5.i386",
                  "product_id": "acroread-0:8.1.3-1.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread@8.1.3-1.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "acroread-plugin-0:8.1.3-1.el5.i386",
                "product": {
                  "name": "acroread-plugin-0:8.1.3-1.el5.i386",
                  "product_id": "acroread-plugin-0:8.1.3-1.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread-plugin@8.1.3-1.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "acroread-0:8.1.3-1.el4.i386",
                "product": {
                  "name": "acroread-0:8.1.3-1.el4.i386",
                  "product_id": "acroread-0:8.1.3-1.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread@8.1.3-1.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "acroread-plugin-0:8.1.3-1.el4.i386",
                "product": {
                  "name": "acroread-plugin-0:8.1.3-1.el4.i386",
                  "product_id": "acroread-plugin-0:8.1.3-1.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread-plugin@8.1.3-1.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "acroread-plugin-0:8.1.3-1.i386",
                "product": {
                  "name": "acroread-plugin-0:8.1.3-1.i386",
                  "product_id": "acroread-plugin-0:8.1.3-1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread-plugin@8.1.3-1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "acroread-0:8.1.3-1.i386",
                "product": {
                  "name": "acroread-0:8.1.3-1.i386",
                  "product_id": "acroread-0:8.1.3-1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/acroread@8.1.3-1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
          "product_id": "3AS-LACD:acroread-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.i386",
        "relates_to_product_reference": "3AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
          "product_id": "3AS-LACD:acroread-plugin-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.i386",
        "relates_to_product_reference": "3AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.i386 as a component of Red Hat Desktop version 3 Extras",
          "product_id": "3Desktop-LACD:acroread-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.i386",
        "relates_to_product_reference": "3Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.i386 as a component of Red Hat Desktop version 3 Extras",
          "product_id": "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.i386",
        "relates_to_product_reference": "3Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
          "product_id": "3ES-LACD:acroread-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.i386",
        "relates_to_product_reference": "3ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
          "product_id": "3ES-LACD:acroread-plugin-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.i386",
        "relates_to_product_reference": "3ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
          "product_id": "3WS-LACD:acroread-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.i386",
        "relates_to_product_reference": "3WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
          "product_id": "3WS-LACD:acroread-plugin-0:8.1.3-1.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.i386",
        "relates_to_product_reference": "3WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:acroread-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:acroread-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:acroread-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el4.i386",
        "relates_to_product_reference": "4WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el5.i386",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
          "product_id": "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el5.i386",
        "relates_to_product_reference": "5Client-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-0:8.1.3-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386"
        },
        "product_reference": "acroread-0:8.1.3-1.el5.i386",
        "relates_to_product_reference": "5Server-Supplementary"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "acroread-plugin-0:8.1.3-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
          "product_id": "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        },
        "product_reference": "acroread-plugin-0:8.1.3-1.el5.i386",
        "relates_to_product_reference": "5Server-Supplementary"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-2549",
      "discovery_date": "2008-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "450078"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "acroread: crash and possible code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2549"
        },
        {
          "category": "external",
          "summary": "RHBZ#450078",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=450078"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2549",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2549"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2549",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2549"
        }
      ],
      "release_date": "2008-05-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "acroread: crash and possible code execution"
    },
    {
      "cve": "CVE-2008-2992",
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469877"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: JavaScript util.printf() function buffer overflow",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2992"
        },
        {
          "category": "external",
          "summary": "RHBZ#469877",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469877"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2992",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2992"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2992",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2992"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-03-03T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Reader: JavaScript util.printf() function buffer overflow"
    },
    {
      "cve": "CVE-2008-4812",
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469875"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: embedded font handling out-of-bounds array indexing",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4812"
        },
        {
          "category": "external",
          "summary": "RHBZ#469875",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469875"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4812",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4812"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4812",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4812"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Reader: embedded font handling out-of-bounds array indexing"
    },
    {
      "cve": "CVE-2008-4813",
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469876"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: PDF objects parsing and JavaScript getCosObj handling memory corruption flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4813"
        },
        {
          "category": "external",
          "summary": "RHBZ#469876",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469876"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4813"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Reader: PDF objects parsing and JavaScript getCosObj handling memory corruption flaw"
    },
    {
      "cve": "CVE-2008-4814",
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469880"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an \"input validation issue.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: arbitrary code execution via unspecified JavaScript method",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4814"
        },
        {
          "category": "external",
          "summary": "RHBZ#469880",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469880"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4814",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4814"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4814",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4814"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Reader: arbitrary code execution via unspecified JavaScript method"
    },
    {
      "cve": "CVE-2008-4815",
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469882"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: insecure RPATH flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4815"
        },
        {
          "category": "external",
          "summary": "RHBZ#469882",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469882"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4815"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Reader: insecure RPATH flaw"
    },
    {
      "cve": "CVE-2008-4817",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2008-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469923"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Reader: Download Manager input validation flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4817"
        },
        {
          "category": "external",
          "summary": "RHBZ#469923",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469923"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4817",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4817"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4817",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4817"
        }
      ],
      "release_date": "2008-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Reader: Download Manager input validation flaw"
    },
    {
      "cve": "CVE-2009-0927",
      "discovery_date": "2009-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618340"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:acroread-0:8.1.3-1.i386",
          "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-0:8.1.3-1.i386",
          "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3ES-LACD:acroread-0:8.1.3-1.i386",
          "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
          "3WS-LACD:acroread-0:8.1.3-1.i386",
          "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
          "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
          "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
          "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
          "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
          "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
          "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618340",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618340"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0927"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2009-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-12T17:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0974"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:acroread-0:8.1.3-1.i386",
            "3AS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-0:8.1.3-1.i386",
            "3Desktop-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3ES-LACD:acroread-0:8.1.3-1.i386",
            "3ES-LACD:acroread-plugin-0:8.1.3-1.i386",
            "3WS-LACD:acroread-0:8.1.3-1.i386",
            "3WS-LACD:acroread-plugin-0:8.1.3-1.i386",
            "4AS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4AS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-0:8.1.3-1.el4.i386",
            "4Desktop-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-0:8.1.3-1.el4.i386",
            "4ES-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-0:8.1.3-1.el4.i386",
            "4WS-LACD:acroread-plugin-0:8.1.3-1.el4.i386",
            "5Client-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Client-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-0:8.1.3-1.el5.i386",
            "5Server-Supplementary:acroread-plugin-0:8.1.3-1.el5.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-03-25T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    }
  ]
}

cve-2008-2549

Vulnerability from cvelistv5

Published

2008-06-04 19:17

Modified

2024-08-07 09:05

Severity ?

Summary

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.

References

▼	URL	Tags
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609	x_refsource_CONFIRM
	http://www.adobe.com/support/security/bulletins/apsb09-04.html	x_refsource_CONFIRM
	http://secunia.com/advisories/35163	third-party-advisory, x_refsource_SECUNIA
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/42886	vdb-entry, x_refsource_XF
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/5687	exploit, x_refsource_EXPLOIT-DB
	http://www.securityfocus.com/bid/29420	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:05:30.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
          },
          {
            "name": "35163",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "acrobatreader-pdf-dos(42886)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42886"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "5687",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/5687"
          },
          {
            "name": "29420",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29420"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
        },
        {
          "name": "35163",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "acrobatreader-pdf-dos(42886)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42886"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "5687",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/5687"
        },
        {
          "name": "29420",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29420"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2549",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
            },
            {
              "name": "35163",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35163"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "acrobatreader-pdf-dos(42886)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42886"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "5687",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/5687"
            },
            {
              "name": "29420",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29420"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2549",
    "datePublished": "2008-06-04T19:17:00",
    "dateReserved": "2008-06-04T00:00:00",
    "dateUpdated": "2024-08-07T09:05:30.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4815

Vulnerability from cvelistv5

Published

2008-11-05 14:51

Modified

2024-08-07 10:31

Severity ?

Summary

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.

References

▼	URL	Tags
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/32100	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46335	vdb-entry, x_refsource_XF
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=469882	x_refsource_MISC
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.426Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "name": "32100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "adobe-acrobat-reader-priv-escalation(46335)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46335"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469882"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "name": "32100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "name": "adobe-acrobat-reader-priv-escalation(46335)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46335"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469882"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4815",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "adobe-acrobat-reader-priv-escalation(46335)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46335"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=469882",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469882"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4815",
    "datePublished": "2008-11-05T14:51:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:27.426Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-2992

Vulnerability from cvelistv5

Published

2008-11-04 18:00

Modified

2024-08-07 09:21

Severity ?

Summary

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/30035	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/498027/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/secunia_research/2008-14/	x_refsource_MISC
	http://www.securityfocus.com/bid/32091	vdb-entry, x_refsource_BID
	http://osvdb.org/49520	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/35163	third-party-advisory, x_refsource_SECUNIA
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	https://www.exploit-db.com/exploits/7006	exploit, x_refsource_EXPLOIT-DB
	http://securityreason.com/securityalert/4549	third-party-advisory, x_refsource_SREASON
	http://www.coresecurity.com/content/adobe-reader-buffer-overflow	x_refsource_MISC
	http://www.zerodayinitiative.com/advisories/ZDI-08-072/	x_refsource_MISC
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/498055/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.exploit-db.com/exploits/6994	exploit, x_refsource_EXPLOIT-DB
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29773	third-party-advisory, x_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/archive/1/498032/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT
	http://www.kb.cert.org/vuls/id/593409	third-party-advisory, x_refsource_CERT-VN
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:21:34.450Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "30035",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30035"
          },
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "name": "20081104 Secunia Research: Adobe Acrobat/Reader \"util.printf()\" Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498027/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2008-14/"
          },
          {
            "name": "32091",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32091"
          },
          {
            "name": "49520",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/49520"
          },
          {
            "name": "35163",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "7006",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/7006"
          },
          {
            "name": "4549",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4549"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.coresecurity.com/content/adobe-reader-buffer-overflow"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-072/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "20081104 ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498055/100/0/threaded"
          },
          {
            "name": "6994",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/6994"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "29773",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29773"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "20081104 CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498032/100/0/threaded"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "name": "VU#593409",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/593409"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "30035",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30035"
        },
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "name": "20081104 Secunia Research: Adobe Acrobat/Reader \"util.printf()\" Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498027/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2008-14/"
        },
        {
          "name": "32091",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32091"
        },
        {
          "name": "49520",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/49520"
        },
        {
          "name": "35163",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "7006",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/7006"
        },
        {
          "name": "4549",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4549"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.coresecurity.com/content/adobe-reader-buffer-overflow"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-072/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "20081104 ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498055/100/0/threaded"
        },
        {
          "name": "6994",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/6994"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "29773",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29773"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "20081104 CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498032/100/0/threaded"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "name": "VU#593409",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/593409"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2992",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "30035",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30035"
            },
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
            },
            {
              "name": "20081104 Secunia Research: Adobe Acrobat/Reader \"util.printf()\" Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498027/100/0/threaded"
            },
            {
              "name": "http://secunia.com/secunia_research/2008-14/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2008-14/"
            },
            {
              "name": "32091",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32091"
            },
            {
              "name": "49520",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/49520"
            },
            {
              "name": "35163",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35163"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "7006",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/7006"
            },
            {
              "name": "4549",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4549"
            },
            {
              "name": "http://www.coresecurity.com/content/adobe-reader-buffer-overflow",
              "refsource": "MISC",
              "url": "http://www.coresecurity.com/content/adobe-reader-buffer-overflow"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-08-072/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-072/"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "20081104 ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498055/100/0/threaded"
            },
            {
              "name": "6994",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/6994"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "29773",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29773"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "20081104 CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498032/100/0/threaded"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "VU#593409",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/593409"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2992",
    "datePublished": "2008-11-04T18:00:00",
    "dateReserved": "2008-07-02T00:00:00",
    "dateUpdated": "2024-08-07T09:21:34.450Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0927

Vulnerability from cvelistv5

Published

2009-03-19 10:00

Modified

2024-08-07 04:57

Severity ?

Summary

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

References

▼	URL	Tags
	http://www.zerodayinitiative.com/advisories/ZDI-09-014	x_refsource_MISC
	http://www.exploit-db.com/exploits/9579	exploit, x_refsource_EXPLOIT-DB
	http://www.securityfocus.com/bid/34169	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/34790	third-party-advisory, x_refsource_SECUNIA
	http://www.adobe.com/support/security/bulletins/apsb09-04.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1021861	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2009/0770	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/34490	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/502116/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/34706	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1	vendor-advisory, x_refsource_SUNALERT
	http://security.gentoo.org/glsa/glsa-200904-17.xml	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/1019	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/49312	vdb-entry, x_refsource_XF

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:57:16.395Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-014"
          },
          {
            "name": "9579",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/9579"
          },
          {
            "name": "34169",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34169"
          },
          {
            "name": "34790",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34790"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
          },
          {
            "name": "1021861",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021861"
          },
          {
            "name": "ADV-2009-0770",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0770"
          },
          {
            "name": "34490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34490"
          },
          {
            "name": "SUSE-SA:2009:014",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html"
          },
          {
            "name": "20090324 ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502116/100/0/threaded"
          },
          {
            "name": "34706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34706"
          },
          {
            "name": "256788",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1"
          },
          {
            "name": "GLSA-200904-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200904-17.xml"
          },
          {
            "name": "SUSE-SR:2009:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html"
          },
          {
            "name": "ADV-2009-1019",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1019"
          },
          {
            "name": "adobe-unspecified-javascript-code-execution(49312)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49312"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-014"
        },
        {
          "name": "9579",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/9579"
        },
        {
          "name": "34169",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34169"
        },
        {
          "name": "34790",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34790"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
        },
        {
          "name": "1021861",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021861"
        },
        {
          "name": "ADV-2009-0770",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0770"
        },
        {
          "name": "34490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34490"
        },
        {
          "name": "SUSE-SA:2009:014",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html"
        },
        {
          "name": "20090324 ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502116/100/0/threaded"
        },
        {
          "name": "34706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34706"
        },
        {
          "name": "256788",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1"
        },
        {
          "name": "GLSA-200904-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200904-17.xml"
        },
        {
          "name": "SUSE-SR:2009:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html"
        },
        {
          "name": "ADV-2009-1019",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1019"
        },
        {
          "name": "adobe-unspecified-javascript-code-execution(49312)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49312"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0927",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-09-014",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-014"
            },
            {
              "name": "9579",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/9579"
            },
            {
              "name": "34169",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34169"
            },
            {
              "name": "34790",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34790"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
            },
            {
              "name": "1021861",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021861"
            },
            {
              "name": "ADV-2009-0770",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0770"
            },
            {
              "name": "34490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34490"
            },
            {
              "name": "SUSE-SA:2009:014",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html"
            },
            {
              "name": "20090324 ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502116/100/0/threaded"
            },
            {
              "name": "34706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34706"
            },
            {
              "name": "256788",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1"
            },
            {
              "name": "GLSA-200904-17",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200904-17.xml"
            },
            {
              "name": "SUSE-SR:2009:009",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html"
            },
            {
              "name": "ADV-2009-1019",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1019"
            },
            {
              "name": "adobe-unspecified-javascript-code-execution(49312)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49312"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0927",
    "datePublished": "2009-03-19T10:00:00",
    "dateReserved": "2009-03-17T00:00:00",
    "dateUpdated": "2024-08-07T04:57:16.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4817

Vulnerability from cvelistv5

Published

2008-11-05 14:51

Modified

2024-08-07 10:31

Severity ?

Summary

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

References

▼	URL	Tags
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/49541	vdb-entry, x_refsource_OSVDB
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT
	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756	third-party-advisory, x_refsource_IDEFENSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.796Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "name": "49541",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/49541"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "name": "20081104 Adobe Acrobat Professional And Reader AcroJS Heap Corruption Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-11-15T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "name": "49541",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/49541"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "name": "20081104 Adobe Acrobat Professional And Reader AcroJS Heap Corruption Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4817",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "49541",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/49541"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "20081104 Adobe Acrobat Professional And Reader AcroJS Heap Corruption Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4817",
    "datePublished": "2008-11-05T14:51:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:27.796Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4812

Vulnerability from cvelistv5

Published

2008-11-05 14:51

Modified

2024-08-07 10:31

Severity ?

Summary

Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.

References

▼	URL	Tags
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46332	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/32100	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/35163	third-party-advisory, x_refsource_SECUNIA
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755	third-party-advisory, x_refsource_IDEFENSE
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.825Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "name": "adobe-acrobatreader-type1font-code-execution(46332)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
          },
          {
            "name": "32100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "35163",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "name": "adobe-acrobatreader-type1font-code-execution(46332)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
        },
        {
          "name": "32100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "name": "35163",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4812",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
            },
            {
              "name": "adobe-acrobatreader-type1font-code-execution(46332)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "35163",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35163"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4812",
    "datePublished": "2008-11-05T14:51:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:27.825Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4813

Vulnerability from cvelistv5

Published

2008-11-05 14:51

Modified

2024-08-07 10:31

Severity ?

Summary

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/498057/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://www.adobe.com/support/security/bulletins/apsb09-04.html	x_refsource_CONFIRM
	http://www.zerodayinitiative.com/advisories/ZDI-08-073/	x_refsource_MISC
	http://www.securityfocus.com/bid/32100	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46344	vdb-entry, x_refsource_XF
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/archive/1/498056/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/securityalert/4564	third-party-advisory, x_refsource_SREASON
	http://www.zerodayinitiative.com/advisories/ZDI-08-074/	x_refsource_MISC
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46333	vdb-entry, x_refsource_XF
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT
	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20081104 ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498057/100/0/threaded"
          },
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-073/"
          },
          {
            "name": "32100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "adobe-acrobatreader-collab-code-execution(46344)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46344"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "20081104 ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/498056/100/0/threaded"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "4564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4564"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-074/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "adobe-acrobatreader-object-code-execution(46333)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46333"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20081104 ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498057/100/0/threaded"
        },
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-073/"
        },
        {
          "name": "32100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "name": "adobe-acrobatreader-collab-code-execution(46344)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46344"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "20081104 ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/498056/100/0/threaded"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "4564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4564"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-074/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "adobe-acrobatreader-object-code-execution(46333)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46333"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4813",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20081104 ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498057/100/0/threaded"
            },
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-08-073/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-073/"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "adobe-acrobatreader-collab-code-execution(46344)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46344"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "20081104 ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/498056/100/0/threaded"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "4564",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4564"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-08-074/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-074/"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "adobe-acrobatreader-object-code-execution(46333)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46333"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4813",
    "datePublished": "2008-11-05T14:51:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:27.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4814

Vulnerability from cvelistv5

Published

2008-11-05 14:51

Modified

2024-08-07 10:31

Severity ?

Summary

Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation issue."

References

▼	URL	Tags
	http://secunia.com/advisories/32700	third-party-advisory, x_refsource_SECUNIA
	http://www.adobe.com/support/security/bulletins/apsb09-04.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/32100	vdb-entry, x_refsource_BID
	http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/32872	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46334	vdb-entry, x_refsource_XF
	http://www.adobe.com/support/security/bulletins/apsb08-19.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/0098	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1021140	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/3001	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.skyrecon.com/index.php?option=com_content&task=view&id=302&Itemid=124	x_refsource_MISC
	http://www.redhat.com/support/errata/RHSA-2008-0974.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.639Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
          },
          {
            "name": "32100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "adobe-javascript-code-execution1(46334)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46334"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.skyrecon.com/index.php?option=com_content\u0026task=view\u0026id=302\u0026Itemid=124"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an \"input validation issue.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
        },
        {
          "name": "32100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "adobe-javascript-code-execution1(46334)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46334"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.skyrecon.com/index.php?option=com_content\u0026task=view\u0026id=302\u0026Itemid=124"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4814",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an \"input validation issue.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-04.html"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "adobe-javascript-code-execution1(46334)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46334"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "http://www.skyrecon.com/index.php?option=com_content\u0026task=view\u0026id=302\u0026Itemid=124",
              "refsource": "MISC",
              "url": "http://www.skyrecon.com/index.php?option=com_content\u0026task=view\u0026id=302\u0026Itemid=124"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4814",
    "datePublished": "2008-11-05T14:51:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:27.639Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature