CVE-2008-5364

2008-12-0811:30:06

CWE-119

mitre

web.nvd.nist.gov

nvd

cve

adobe reader

buffer overflow

activex

remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.364

Percentile

97.2%

JSON

Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2008-4817.

Affected configurations

Nvd

Node

nos_microsystemsgetplus_download_manager

AND

adobeacrobat_readerMatch8.1

VendorProductVersionCPE
nos_microsystemsgetplus_download_manager*cpe:2.3:a:nos_microsystems:getplus_download_manager:*:*:*:*:*:*:*:*
adobeacrobat_reader8.1cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nos_microsystems	getplus_download_manager	*	cpe:2.3:a:nos_microsystems:getplus_download_manager::::::::
adobe	acrobat_reader	8.1	cpe:2.3:a:adobe:acrobat_reader:8.1:::::::*