Adobe · Acrobat and Reader
CVE-2008-0655
Adobe Acrobat and Reader Unspecified Vulnerability
Exploited in attacks
High 8.8 Attack chance: 38%
What it is
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CISA: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 22, 2022
- Added to the CISA list
- June 8, 2022
- Published
- February 7, 2008
- Severity
- High 8.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 38% in the top 1.5% of all known vulnerabilities
- More details
- NVD · CVE.org · CISA
All references (20)
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://www.redhat.com/support/errata/RHSA-2008-0144.html
- http://securitytracker.com/id?1019346
- http://www.us-cert.gov/cas/techalerts/TA08-043A.html
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- http://www.vupen.com/english/advisories/2008/1966/references
- http://secunia.com/advisories/28851
- http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html
- http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
- http://www.adobe.com/support/security/advisories/apsa08-01.html
- http://secunia.com/advisories/28983
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299
- http://secunia.com/advisories/29065
- http://secunia.com/advisories/30840
- http://secunia.com/advisories/29205
- http://www.securityfocus.com/bid/27641
- http://www.vupen.com/english/advisories/2008/0425
- http://secunia.com/advisories/28802
More exploited flaws from Adobe
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| May 20, 2026 | Heap-Based Buffer Overflow | Acrobat and Reader | High 8.8 | 87% |
| Apr 13, 2026 | Prototype Pollution | Acrobat and Reader | High 8.6 | 7.2% |
| Oct 10, 2023 | Use-After-Free | Acrobat and Reader | High 7.8 | 59% |
| Sep 14, 2023 | Out-of-Bounds Write | Acrobat and Reader | High 7.8 | 6.7% |
| Jun 8, 2022 | Buffer Overflow | Acrobat and Reader | High 7.8 | 87% |
| Jun 8, 2022 | Universal 3D Remote Code Execution | Acrobat and Reader | High 8.8 | 83% |
| Jun 8, 2022 | Use-After-Free | Acrobat and Reader | High 7.8 | 82% |
| Jun 8, 2022 | Stack-Based Buffer Overflow | Acrobat and Reader | High 7.3 | 81% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.