CVE-2007-5659 Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: thi...
HighCVSS 7.8
EPSS 87.3%
CISA KEV
added 2022-06-08 · due 2022-06-22
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.
CISA Known Exploited Vulnerability
- Date added
- 2022-06-08
- Due date (FCEB)
- 2022-06-22
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | < 8.1.2 | 8.1.2 |
| Adobe Acrobat Reader | < 8.1.2 | 8.1.2 |
References
- 20080208 Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities broken-link third-party-advisory
- 29065 broken-link third-party-advisory
- 29205 broken-link third-party-advisory
- 30840 broken-link third-party-advisory
- GLSA-200803-01 third-party-advisory vendor-advisory
- 239286 broken-link vendor-advisory
- www.adobe.com vendor-advisory
- www.adobe.com vendor-advisory
- VU#666281 third-party-advisory us-government-resource
- RHSA-2008:0144 broken-link vendor-advisory
- TA08-043A broken-link third-party-advisory us-government-resource
- ADV-2008-1966 broken-link vdb-entry
- oval:org.mitre.oval:def:9813 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource