CVE-2007-5663 Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issu...
HighCVSS 9.3
EPSS 13.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issue might be subsumed by CVE-2008-0655.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 8.1.1 | No fix listed |
| Adobe Acrobat Reader | <= 8.1.1 | No fix listed |
References
- 20080208 Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability third-party-advisory
- 29065 third-party-advisory
- 29205 third-party-advisory
- 30840 third-party-advisory
- GLSA-200803-01 vendor-advisory
- 239286 vendor-advisory
- www.adobe.com patch
- www.adobe.com
- VU#140129 third-party-advisory us-government-resource
- RHSA-2008:0144 vendor-advisory
- TA08-043A third-party-advisory us-government-resource
- ADV-2008-1966 vdb-entry
- oval:org.mitre.oval:def:9928 signature vdb-entry