PT-2008-6023 · Adobe · Reader+1

Peter Vreugdenhil

·

Publicado

2008-11-05

·

Atualizado

2018-10-30

·

CVE-2008-4813

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.1.2 and earlier Adobe Reader and Acrobat versions prior to 7.1.1
Description The issue allows remote attackers to execute arbitrary code via a crafted PDF document. This can be achieved in two ways: by performing unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method, or by containing a malformed PDF object that triggers memory corruption during parsing.
Recommendations For Adobe Reader and Acrobat versions 8.1.2 and earlier, update to a version later than 8.1.2 to resolve the issue. For Adobe Reader and Acrobat versions prior to 7.1.1, update to version 7.1.1 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4813
RHSA-2008:0974

Produtos afetados

Acrobat
Reader