CVE-2008-0726 Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
HighCVSS 9.3
EPSS 14.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 8.1.1 | No fix listed |
| Adobe Acrobat Reader | <= 8.1.1 | No fix listed |
References
- SUSE-SA:2008:009 vendor-advisory
- 28983 third-party-advisory vendor-advisory
- 29065 third-party-advisory vendor-advisory
- 29205 third-party-advisory
- 30840 third-party-advisory
- GLSA-200803-01 vendor-advisory
- 239286 vendor-advisory
- www.adobe.com patch
- www.adobe.com
- RHSA-2008:0144 vendor-advisory
- 20080211 ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability mailing-list
- ADV-2008-1966 vdb-entry
- www.zerodayinitiative.com
- oval:org.mitre.oval:def:10957 signature vdb-entry