CVE-2008-2549

2008-06-0419:32:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

adobe acrobat

reader 8.1.2

remote attack

denial of service

arbitrary code

pdf vulnerability

nvd

cve-2008-2549

7.5 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.295 Low

EPSS

Percentile

96.9%

JSON

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq7.0.9
adobe:acrobat_readeradobe acrobat readereq5.0.10
adobe:acrobat_readeradobe acrobat readereq4.5
adobe:acrobat_readeradobe acrobat readereq5.0
adobe:acrobat_readeradobe acrobat readereq5.0.9
adobe:acrobat_readeradobe acrobat readereq7.0.5
adobe:acrobat_readeradobe acrobat readereq7.0.6
adobe:acrobat_readeradobe acrobat readereq3.0
adobe:acrobat_readeradobe acrobat readereq4.0.5
adobe:acrobat_readeradobe acrobat readereq4.0

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.9
adobe:acrobat_reader	adobe acrobat reader	eq	5.0.10
adobe:acrobat_reader	adobe acrobat reader	eq	4.5
adobe:acrobat_reader	adobe acrobat reader	eq	5.0
adobe:acrobat_reader	adobe acrobat reader	eq	5.0.9
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.6
adobe:acrobat_reader	adobe acrobat reader	eq	3.0
adobe:acrobat_reader	adobe acrobat reader	eq	4.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	4.0