HIGH 7.8 KEV Publié le 2008-11-04

CVE-2008-2992

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

CVSS v3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Ajouté au KEV: 2022-03-03
Deadline remédiation: 2022-03-24
Action requise: Apply updates per vendor instructions.
Ransomware: Oui — campagne ransomware connue

Apps mobiles affectées

Adobe Acrobat Reader pour PDF

Android

com.adobe.reader

1 CVE 1 KEV

Adobe Acrobat Reader: Lire PDF

iOS

com.adobe.Adobe-Reader

1 CVE 1 KEV

Configurations CPE vulnérables

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
adobe	acrobat_reader	Android	≤8.1.2	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	iOS	≤8.1.2	cpe:2.3:a:adobe:acrobat_reader::::::::

Voir sur NVD ↗ Catalogue CISA KEV ↗