CVE-2008-4817

2008-11-0515:00:14

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.364

Percentile

97.2%

JSON

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

Affected configurations

Nvd

Node

adobedownload_manager

AND

adobeacrobatRange≤8.1.2unknown3d

adobeacrobatRange≤8.1.2unknownprofessional

adobeacrobatRange≤8.1.2unknownstandard

adobeacrobatMatch8.1.1

adobeacrobatMatch8.1.1unknown3d

adobeacrobatMatch8.1.1unknownprofessional

adobeacrobatMatch8.1.1unknownstandard

adobeacrobat_readerRange≤8.0

VendorProductVersionCPE
adobedownload_manager*cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*
adobeacrobat8.1.1cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	download_manager	*	cpe:2.3:a:adobe:download_manager::::::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:3d:::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:professional:::::
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::unknown:standard:::::
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:::::*
adobe	acrobat	8.1.1	cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:::::*
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::