VulnerabilityModified
CVE-2008-0726
Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
HIGH 9.3EPSS 14.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 14.64% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- adobe/acrobat · adobe/acrobat reader
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
- http://secunia.com/advisories/28983Vendor Advisory
- http://secunia.com/advisories/29065Vendor Advisory
- http://secunia.com/advisories/29205
- http://secunia.com/advisories/30840
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
- http://www.adobe.com/support/security/advisories/apsa08-01.htmlPatch
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- http://www.redhat.com/support/errata/RHSA-2008-0144.html
- http://www.securityfocus.com/archive/1/488000/100/0/threaded
- http://www.vupen.com/english/advisories/2008/1966/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-004.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
- http://secunia.com/advisories/28983Vendor Advisory
- http://secunia.com/advisories/29065Vendor Advisory
- http://secunia.com/advisories/29205
- http://secunia.com/advisories/30840
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
- http://www.adobe.com/support/security/advisories/apsa08-01.htmlPatch
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- http://www.redhat.com/support/errata/RHSA-2008-0144.html
- http://www.securityfocus.com/archive/1/488000/100/0/threaded
- http://www.vupen.com/english/advisories/2008/1966/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-004.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.