[ CVE-2008-0655 · Published 7 Feb 2008 ]

Adobe Acrobat and Reader Unspecified Vulnerability

Exploited · CISA KEV CVSS 8.8 EPSS 38%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-06-08
  • EPSS: 38% chance of exploitation in the next 30 days (higher than 99% of CVEs)

[ Description ]Official description

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

CISA: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 22 Jun 2022): Apply updates per vendor instructions.