Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-2992
HistoryNov 04, 2008 - 6:29 p.m.

CVE-2008-2992

2008-11-0418:29:47
CWE-119
[email protected]
web.nvd.nist.gov
908
In Wild
cve-2008-2992
adobe acrobat
adobe reader
buffer overflow
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.972 High

EPSS

Percentile

99.8%

JSON

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

Affected configurations

NVD
Node
adobeacrobatRange≀8.1.2
OR
adobeacrobatMatch3.0
OR
adobeacrobatMatch3.1
OR
adobeacrobatMatch4.0
OR
adobeacrobatMatch4.0.5
OR
adobeacrobatMatch4.0.5a
OR
adobeacrobatMatch4.0.5c
OR
adobeacrobatMatch5.0
OR
adobeacrobatMatch5.0.5
OR
adobeacrobatMatch5.0.6
OR
adobeacrobatMatch5.0.10
OR
adobeacrobatMatch6.0
OR
adobeacrobatMatch6.0.1
OR
adobeacrobatMatch6.0.2
OR
adobeacrobatMatch6.0.3
OR
adobeacrobatMatch6.0.4
OR
adobeacrobatMatch6.0.5
OR
adobeacrobatMatch7.0
OR
adobeacrobatMatch7.0.1
OR
adobeacrobatMatch7.0.2
OR
adobeacrobatMatch7.0.3
OR
adobeacrobatMatch7.0.4
OR
adobeacrobatMatch7.0.5
OR
adobeacrobatMatch7.0.6
OR
adobeacrobatMatch7.0.7
OR
adobeacrobatMatch7.0.8
OR
adobeacrobatMatch7.0.9
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobat_readerRange≀8.1.2
OR
adobeacrobat_readerMatch3.0
OR
adobeacrobat_readerMatch4.0
OR
adobeacrobat_readerMatch4.0.5
OR
adobeacrobat_readerMatch4.0.5a
OR
adobeacrobat_readerMatch4.0.5c
OR
adobeacrobat_readerMatch4.5
OR
adobeacrobat_readerMatch5.0
OR
adobeacrobat_readerMatch5.0.5
OR
adobeacrobat_readerMatch5.0.6
OR
adobeacrobat_readerMatch5.0.7
OR
adobeacrobat_readerMatch5.0.9
OR
adobeacrobat_readerMatch5.0.10
OR
adobeacrobat_readerMatch5.0.11
OR
adobeacrobat_readerMatch5.1
OR
adobeacrobat_readerMatch6.0
OR
adobeacrobat_readerMatch6.0.1
OR
adobeacrobat_readerMatch6.0.2
OR
adobeacrobat_readerMatch6.0.3
OR
adobeacrobat_readerMatch6.0.4
OR
adobeacrobat_readerMatch6.0.5
OR
adobeacrobat_readerMatch7.0
OR
adobeacrobat_readerMatch7.0.1
OR
adobeacrobat_readerMatch7.0.2
OR
adobeacrobat_readerMatch7.0.3
OR
adobeacrobat_readerMatch7.0.4
OR
adobeacrobat_readerMatch7.0.5
OR
adobeacrobat_readerMatch7.0.6
OR
adobeacrobat_readerMatch7.0.7
OR
adobeacrobat_readerMatch7.0.8
OR
adobeacrobat_readerMatch7.0.9
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1

References

Related

nvd 2
ubuntucve 1
securityvulns 6
cvelist 2
coresecurity 1
attackerkb 1
prion 2
packetstorm 2
saint 4
checkpoint_advisories 2
cisa_kev 1
seebug 3
exploitpack 1
cert 2
canvas 2
zdi 1
exploitdb 1
nessus 8
cve 1
thn 2
threatpost 1
gentoo 1
openvas 5
redhat 1
nvd
nvd
CVE-2008-2992
2008-11-04 18:29:47
CVE-2008-1104
2008-05-21 13:24:00
ubuntucve
ubuntucve
CVE-2008-2992
2008-11-04 00:00:00
securityvulns
securityvulns
CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow
2008-11-05 00:00:00
ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability
2008-11-05 00:00:00
Secunia Research: Adobe Acrobat/Reader "util.printf()" Buffer Overflow
2008-11-05 00:00:00
cvelist
cvelist
CVE-2008-2992
2008-11-04 18:00:00
CVE-2008-1104
2008-05-21 10:00:00
coresecurity
coresecurity
Adobe Reader Javascript Printf Buffer Overflow
2008-11-04 00:00:00
attackerkb
attackerkb
CVE-2008-2992
2008-11-04 00:00:00
prion
prion
Stack overflow
2008-11-04 18:29:00
Stack overflow
2008-05-21 13:24:00
packetstorm
packetstorm
Adobe util.printf() Buffer Overflow
2009-11-26 00:00:00
adobe-printf.txt
2008-11-06 00:00:00
saint
saint
Adobe Acrobat util.printf JavaScript function buffer overflow
2008-11-10 00:00:00
Adobe Acrobat util.printf JavaScript function buffer overflow
2008-11-10 00:00:00
Adobe Acrobat util.printf JavaScript function buffer overflow
2008-11-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader and Acrobat util.printf Stack Buffer Overflow (CVE-2008-2992)
2009-12-31 00:00:00
Workaround for Adobe Reader and Acrobat util.printf Stack Buffer Overflow Vulnerability
2008-12-01 00:00:00
cisa_kev
cisa_kev
Adobe Reader and Acrobat Input Validation Vulnerability
2022-03-03 00:00:00
seebug
seebug
Adobe Reader - util.printf() JavaScript Function Stack Overflow Exploit (2)
2014-07-01 00:00:00
Adobe Reader util.printf() JavaScript Function Stack Overflow Exploit #2
2008-11-07 00:00:00
Foxit Reader util.printf()ε‡½ζ•°θΏœη¨‹ζ ˆζΊ’ε‡ΊζΌζ΄ž
2008-05-22 00:00:00
exploitpack
exploitpack
Adobe Reader - util.printf() JavaScript Function Stack Overflow (2)
2008-11-05 00:00:00
cert
cert
Adobe Reader and Acrobat util.printf() JavaScript function stack buffer overflow
2008-11-04 00:00:00
Foxit Reader buffer overflow vulnerability
2008-05-27 00:00:00
canvas
canvas
Immunity Canvas: ACROBAT_JS3
2008-11-04 18:29:00
Immunity Canvas: FOXIT_PRINTF
2008-05-21 13:24:00
zdi
zdi
Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability
2008-11-04 00:00:00
exploitdb
exploitdb
Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (2)
2008-11-05 00:00:00
nessus
nessus
Foxit Reader < 2.3 Build 2923 util.printf() Floating Point Specifier RCE
2008-05-20 00:00:00
GLSA-200901-09 : Adobe Reader: User-assisted execution of arbitrary code
2009-01-14 00:00:00
Adobe Reader < 8.1.3 / 9.0 Multiple Vulnerabilities
2008-11-04 00:00:00
cve
cve
CVE-2008-1104
2008-05-21 13:24:00
thn
thn
Bleeding Life 2 Exploit Pack Released
2011-10-24 04:30:00
Phoenix Exploit's Kit 2.8 mini version
2011-10-12 17:41:00
threatpost
threatpost
PBS Website Compromised, Used to Serve Exploits
2009-09-23 22:41:03
gentoo
gentoo
Adobe Reader: User-assisted execution of arbitrary code
2009-01-13 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200901-09 (acroread)
2009-01-20 00:00:00
Gentoo Security Advisory GLSA 200901-09 (acroread)
2009-01-20 00:00:00
Adobe Reader/Acrobat Multiple Vulnerabilities (APSB08-19) - Linux
2008-11-05 00:00:00
redhat
redhat
(RHSA-2008:0974) Critical: acroread security update
2008-11-12 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.972 High

EPSS

Percentile

99.8%

JSON
Related for CVE-2008-2992
nvd2ubuntucve1securityvulns6cvelist2coresecurity1attackerkb1prion2packetstorm2saint4checkpoint_advisories2cisa_kev1seebug3exploitpack1cert2canvas2zdi1exploitdb1nessus8cve1thn2threatpost1gentoo1openvas5redhat1