PT-2008-6023 · Adobe · Reader+1

Peter Vreugdenhil · Published 2008-11-05 · Updated 2018-10-30 · CVE-2008-4813

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.1.2 and earlier Adobe Reader and Acrobat versions prior to 7.1.1

Description The issue allows remote attackers to execute arbitrary code via a crafted PDF document. This can be achieved in two ways: by performing unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method, or by containing a malformed PDF object that triggers memory corruption during parsing.

Recommendations For Adobe Reader and Acrobat versions 8.1.2 and earlier, update to a version later than 8.1.2 to resolve the issue. For Adobe Reader and Acrobat versions prior to 7.1.1, update to version 7.1.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-4813

RHSA-2008:0974

Affected Products

Acrobat

Reader

References · 21

• http://adobe.com/support/security/bulletins/apsb08-19.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4813 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0974.html · Vendor Advisory
• http://download.oracle.com/sunalerts/1019937.1.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html · Vendor Advisory
• http://securityreason.com/securityalert/4564 · Note
• http://us-cert.gov/cas/techalerts/TA08-309A.html · Note
• http://securityfocus.com/archive/1/498057/100/0/threaded · Note
• http://securityfocus.com/archive/1/498056/100/0/threaded · Note
• http://securityfocus.com/bid/32100 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46333 · Note
• http://securitytracker.com/id?1021140 · Note
• http://zerodayinitiative.com/advisories/ZDI-08-074 · Note
• http://adobe.com/support/security/bulletins/apsb09-04.html · Note
• http://vupen.com/english/advisories/2009/0098 · Note