CVE-2008-4813 Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that....
HighCVSS 9.3
EPSS 17.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.1-unknown | No fix listed |
| Adobe Acrobat Reader | <= 8.0 | No fix listed |
References
- 249366 vendor-advisory
- SUSE-SR:2008:026 vendor-advisory
- 32700 third-party-advisory
- 32872 third-party-advisory
- 4564 third-party-advisory
- support.nortel.com
- www.adobe.com patch vendor-advisory
- www.adobe.com
- RHSA-2008:0974 vendor-advisory
- 20081104 ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability mailing-list
- 20081104 ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability mailing-list
- 32100 vdb-entry
- 1021140 vdb-entry
- TA08-309A third-party-advisory us-government-resource
- ADV-2008-3001 vdb-entry
- ADV-2009-0098 vdb-entry
- www.zerodayinitiative.com
- www.zerodayinitiative.com
- adobe-acrobatreader-object-code-execution(46333) vdb-entry
- adobe-acrobatreader-collab-code-execution(46344) vdb-entry