vulnwire
9.3crit

CVE-2008-0726in critical feed

Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to t…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
14.6%
percentile 97%
Public exploits
0
none known

Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.

Exploit prediction (EPSS)

14.64% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • lists.opensuse.org /opensuse-security-announce/2008-02/msg00007.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • adobe.com /support/security/bulletins/apsb08-13.html · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/1966/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • adobe.com /support/security/advisories/apsa08-01.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/28983 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-239286-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • securityfocus.com /archive/1/488000/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • security.gentoo.org /glsa/glsa-200803-01.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/29065 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/30840 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/29205 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • zerodayinitiative.com /advisories/ZDI-08-004.html · x_refsource_MISC, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • redhat.com /support/errata/RHSA-2008-0144.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.