Lucene search

MitreCVE-2008-4816

HistoryNov 05, 2008 - 3:00 p.m.

CVE-2008-4816

2008-11-0515:00:14

mitre

web.nvd.nist.gov

cve-2008-4816

adobe reader

vulnerability

remote attackers

internet security options

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.007

Percentile

80.2%

JSON

Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.

Affected configurations

Nvd

Node

microsoftwindows

AND

adobeacrobatRange≤8.1.2unknown3d

adobeacrobatRange≤8.1.2unknownprofessional

adobeacrobatRange≤8.1.2unknownstandard

adobeacrobatMatch8.1.1

adobeacrobatMatch8.1.1unknown3d

adobeacrobatMatch8.1.1unknownprofessional

adobeacrobatMatch8.1.1unknownstandard

adobeacrobat_readerRange≤8.0

AND

adobedownload_manager

VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobedownload_manager*cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:3d:::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:professional:::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:standard:::::
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:::::*
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	download_manager	*	cpe:2.3:a:adobe:download_manager::::::::

References

lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

secunia.com/advisories/32872

www.adobe.com/support/security/bulletins/apsb08-19.html

www.securitytracker.com/id?1021140

www.us-cert.gov/cas/techalerts/TA08-309A.html

www.vupen.com/english/advisories/2008/3001

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.007

Percentile

80.2%

JSON

Related for CVE-2008-4816