PT-2008-6455 · Adobe · Acrobat

Published 2008-12-05 · Updated 2008-12-05 · CVE-2008-5331

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat version 9

Description The issue makes it easier for attackers to guess a document's password via a brute-force attack due to the use of more efficient encryption.

Recommendations For Adobe Acrobat version 9, consider using stronger passwords and avoiding the use of weak or default passwords to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2008-5331

Affected Products

Acrobat

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-5331 · Security Note
• http://elcomsoft.com/PR/apdfpr_081126_en.pdf · Note
• http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html · Note
• http://securityfocus.com/bid/32610 · Note