CVE-2008-2549 Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as....
MediumCVSS 4.3
EPSS 52.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | <= 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 3.0 | No fix listed |
| Adobe Acrobat Reader | = 4.0 | No fix listed |
| Adobe Acrobat Reader | = 4.0.5 | No fix listed |
| Adobe Acrobat Reader | = 4.5 | No fix listed |
| Adobe Acrobat Reader | = 5.0 | No fix listed |
| Adobe Acrobat Reader | = 5.0.5 | No fix listed |
| Adobe Acrobat Reader | = 5.0.6 | No fix listed |
| Adobe Acrobat Reader | = 5.0.7 | No fix listed |
| Adobe Acrobat Reader | = 5.0.9 | No fix listed |
| Adobe Acrobat Reader | = 5.0.10 | No fix listed |
| Adobe Acrobat Reader | = 5.0.11 | No fix listed |
| Adobe Acrobat Reader | = 5.1 | No fix listed |
| Adobe Acrobat Reader | = 6.0 | No fix listed |
| Adobe Acrobat Reader | = 6.0.1 | No fix listed |
| Adobe Acrobat Reader | = 6.0.2 | No fix listed |
| Adobe Acrobat Reader | = 6.0.3 | No fix listed |
| Adobe Acrobat Reader | = 6.0.4 | No fix listed |
| Adobe Acrobat Reader | = 6.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0 | No fix listed |
| Adobe Acrobat Reader | = 7.0.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0.2 | No fix listed |
| Adobe Acrobat Reader | = 7.0.3 | No fix listed |
| Adobe Acrobat Reader | = 7.0.4 | No fix listed |
| Adobe Acrobat Reader | = 7.0.5 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 7.0.6 | No fix listed |
| Adobe Acrobat Reader | = 7.0.7 | No fix listed |
| Adobe Acrobat Reader | = 7.0.8 | No fix listed |
| Adobe Acrobat Reader | = 7.0.9 | No fix listed |
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
References
- 249366 vendor-advisory
- SUSE-SR:2008:026 vendor-advisory
- 32700 third-party-advisory
- 32872 third-party-advisory
- 35163 third-party-advisory
- support.nortel.com
- support.nortel.com
- www.adobe.com
- www.adobe.com
- RHSA-2008:0974 vendor-advisory
- 29420 vdb-entry
- 1021140 vdb-entry
- TA08-309A third-party-advisory us-government-resource
- ADV-2008-3001 vdb-entry
- ADV-2009-0098 vdb-entry
- acrobatreader-pdf-dos(42886) vdb-entry
- 5687 exploit