9.3

CVE-2008-2042

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version <= 8.1.1
Adobe ≫ Acrobat Version3.0
Adobe ≫ Acrobat Version3.1
Adobe ≫ Acrobat Version4.0
Adobe ≫ Acrobat Version4.0.5
Adobe ≫ Acrobat Version4.0.5a
Adobe ≫ Acrobat Version4.0.5c
Adobe ≫ Acrobat Version5.0
Adobe ≫ Acrobat Version5.0.5
Adobe ≫ Acrobat Version5.0.6
Adobe ≫ Acrobat Version5.0.10
Adobe ≫ Acrobat Version6.0
Adobe ≫ Acrobat Version6.0.1
Adobe ≫ Acrobat Version6.0.2
Adobe ≫ Acrobat Version6.0.3
Adobe ≫ Acrobat Version6.0.4
Adobe ≫ Acrobat Version6.0.5
Adobe ≫ Acrobat Version6.0.6
Adobe ≫ Acrobat Version7.0
Adobe ≫ Acrobat Version7.0.1
Adobe ≫ Acrobat Version7.0.2
Adobe ≫ Acrobat Version7.0.3
Adobe ≫ Acrobat Version7.0.4
Adobe ≫ Acrobat Version7.0.5
Adobe ≫ Acrobat Version7.0.6
Adobe ≫ Acrobat Version7.0.7
Adobe ≫ Acrobat Version7.0.8
Adobe ≫ Acrobat Version7.0.9
Adobe ≫ Acrobat Version7.1.0
Adobe ≫ Acrobat Version7.1.1
Adobe ≫ Acrobat Version7.1.2
Adobe ≫ Acrobat Version7.1.3
Adobe ≫ Acrobat Version7.1.4
Adobe ≫ Acrobat Version8.0
Adobe ≫ Acrobat Version8.1
Adobe ≫ Acrobat Reader Version <= 8.1.1
Adobe ≫ Acrobat Reader Version3.0
Adobe ≫ Acrobat Reader Version3.01
Adobe ≫ Acrobat Reader Version3.02
Adobe ≫ Acrobat Reader Version4.0
Adobe ≫ Acrobat Reader Version4.0.5
Adobe ≫ Acrobat Reader Version4.0.5a
Adobe ≫ Acrobat Reader Version4.0.5c
Adobe ≫ Acrobat Reader Version4.5
Adobe ≫ Acrobat Reader Version5.0
Adobe ≫ Acrobat Reader Version5.0.5
Adobe ≫ Acrobat Reader Version5.0.6
Adobe ≫ Acrobat Reader Version5.0.7
Adobe ≫ Acrobat Reader Version5.0.9
Adobe ≫ Acrobat Reader Version5.0.10
Adobe ≫ Acrobat Reader Version5.0.11
Adobe ≫ Acrobat Reader Version5.1
Adobe ≫ Acrobat Reader Version6.0
Adobe ≫ Acrobat Reader Version6.0.1
Adobe ≫ Acrobat Reader Version6.0.2
Adobe ≫ Acrobat Reader Version6.0.3
Adobe ≫ Acrobat Reader Version6.0.4
Adobe ≫ Acrobat Reader Version6.0.5
Adobe ≫ Acrobat Reader Version6.0.6
Adobe ≫ Acrobat Reader Version7.0
Adobe ≫ Acrobat Reader Version7.0.1
Adobe ≫ Acrobat Reader Version7.0.2
Adobe ≫ Acrobat Reader Version7.0.3
Adobe ≫ Acrobat Reader Version7.0.4
Adobe ≫ Acrobat Reader Version7.0.5
Adobe ≫ Acrobat Reader Version7.0.6
Adobe ≫ Acrobat Reader Version7.0.7
Adobe ≫ Acrobat Reader Version7.0.8
Adobe ≫ Acrobat Reader Version7.0.9
Adobe ≫ Acrobat Reader Version7.1.0
Adobe ≫ Acrobat Reader Version7.1.1
Adobe ≫ Acrobat Reader Version7.1.2
Adobe ≫ Acrobat Reader Version7.1.3
Adobe ≫ Acrobat Reader Version7.1.4
Adobe ≫ Acrobat Reader Version8.0
Adobe ≫ Acrobat Reader Version8.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.48% 0.886
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.