Adobe · Acrobat and Reader
CVE-2008-0655
Adobe Acrobat and Reader Unspecified Vulnerability
Saldırılarda istismar ediliyor
Yüksek 8,8 Saldırı olasılığı: 38%
Nedir
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CISA: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 22 Haziran 2022
- CISA listesine eklenme
- 8 Haziran 2022
- Yayımlanma
- 7 Şubat 2008
- Önem
- Yüksek 8,8 CVSS 3.1
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 38% bilinen tüm açıkların en üstteki 1,5% diliminde
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (20)
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://www.redhat.com/support/errata/RHSA-2008-0144.html
- http://securitytracker.com/id?1019346
- http://www.us-cert.gov/cas/techalerts/TA08-043A.html
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- http://www.vupen.com/english/advisories/2008/1966/references
- http://secunia.com/advisories/28851
- http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html
- http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
- http://www.adobe.com/support/security/advisories/apsa08-01.html
- http://secunia.com/advisories/28983
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299
- http://secunia.com/advisories/29065
- http://secunia.com/advisories/30840
- http://secunia.com/advisories/29205
- http://www.securityfocus.com/bid/27641
- http://www.vupen.com/english/advisories/2008/0425
- http://secunia.com/advisories/28802
Adobe için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 20 May 2026 | Heap-Based Buffer Overflow | Acrobat and Reader | Yüksek 8,8 | 87% |
| 13 Nis 2026 | Prototype Pollution | Acrobat and Reader | Yüksek 8,6 | 7,2% |
| 10 Eki 2023 | Use-After-Free | Acrobat and Reader | Yüksek 7,8 | 59% |
| 14 Eyl 2023 | Out-of-Bounds Write | Acrobat and Reader | Yüksek 7,8 | 6,7% |
| 8 Haz 2022 | Buffer Overflow | Acrobat and Reader | Yüksek 7,8 | 87% |
| 8 Haz 2022 | Universal 3D Remote Code Execution | Acrobat and Reader | Yüksek 8,8 | 83% |
| 8 Haz 2022 | Use-After-Free | Acrobat and Reader | Yüksek 7,8 | 82% |
| 8 Haz 2022 | Stack-Based Buffer Overflow | Acrobat and Reader | Yüksek 7,3 | 81% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.