Adobe · Acrobat and Reader
CVE-2008-0655
Adobe Acrobat and Reader Unspecified Vulnerability
攻撃で悪用
高 8.8 攻撃の可能性：38%
概要
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CISA: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
対処法
Apply updates per vendor instructions.
米国連邦機関の対応期限：2022年6月22日
- CISAのリストに追加
- 2022年6月8日
- 公開日
- 2008年2月7日
- 深刻度
- 高 8.8 CVSS 3.1
- 今後30日間に攻撃される可能性（EPSS）
- 38% 既知の全脆弱性の上位1.4%
- 詳細
- NVD · CVE.org · CISA
すべての参照（20件）
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://www.redhat.com/support/errata/RHSA-2008-0144.html
- http://securitytracker.com/id?1019346
- http://www.us-cert.gov/cas/techalerts/TA08-043A.html
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- http://www.vupen.com/english/advisories/2008/1966/references
- http://secunia.com/advisories/28851
- http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html
- http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
- http://www.adobe.com/support/security/advisories/apsa08-01.html
- http://secunia.com/advisories/28983
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299
- http://secunia.com/advisories/29065
- http://secunia.com/advisories/30840
- http://secunia.com/advisories/29205
- http://www.securityfocus.com/bid/27641
- http://www.vupen.com/english/advisories/2008/0425
- http://secunia.com/advisories/28802
Adobeのその他の悪用された脆弱性
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2026/05/20 | Heap-Based Buffer Overflow | Acrobat and Reader | 高 8.8 | 87% |
| 2026/04/13 | Prototype Pollution | Acrobat and Reader | 高 8.6 | 7.3% |
| 2023/10/10 | Use-After-Free | Acrobat and Reader | 高 7.8 | 59% |
| 2023/09/14 | Out-of-Bounds Write | Acrobat and Reader | 高 7.8 | 7.5% |
| 2022/06/08 | Buffer Overflow | Acrobat and Reader | 高 7.8 | 87% |
| 2022/06/08 | Universal 3D Remote Code Execution | Acrobat and Reader | 高 8.8 | 83% |
| 2022/06/08 | Use-After-Free | Acrobat and Reader | 高 7.8 | 82% |
| 2022/06/08 | Stack-Based Buffer Overflow | Acrobat and Reader | 高 7.3 | 81% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。