[ CVE-2008-0655 · Published 7 Feb 2008 ]
Adobe Acrobat and Reader Unspecified Vulnerability
Exploited · CISA KEV CVSS 8.8
EPSS 38%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-06-08
- EPSS: 38% chance of exploitation in the next 30 days (higher than 99% of CVEs)
[ Description ]Official description
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CISA: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 22 Jun 2022): Apply updates per vendor instructions.
- Patch on secunia.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
- Patch on securityfocus.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.htmlBroken Link
- kb.adobe.com/selfservice/viewContent.doVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.htmlBroken Link
- secunia.com/advisories/28802Broken LinkPatchVendor Advisory
- secunia.com/advisories/28851Broken LinkVendor Advisory
- secunia.com/advisories/28983Broken LinkVendor Advisory
- secunia.com/advisories/29065Broken LinkVendor Advisory
- secunia.com/advisories/29205Broken LinkVendor Advisory
- secunia.com/advisories/30840Broken LinkVendor Advisory
- security.gentoo.org/glsa/glsa-200803-01.xmlThird Party Advisory
- securitytracker.com/idBroken LinkThird Party AdvisoryVDB Entry
- sunsolve.sun.com/search/document.doBroken Link
- www.adobe.com/support/security/advisories/apsa08-01.htmlVendor Advisory
- www.adobe.com/support/security/bulletins/apsb08-13.htmlVendor Advisory
- www.redhat.com/support/errata/RHSA-2008-0144.htmlBroken Link
- www.securityfocus.com/bid/27641Broken LinkExploitPatch
- www.us-cert.gov/cas/techalerts/TA08-043A.htmlBroken LinkThird Party AdvisoryUS Government Resource
- www.vupen.com/english/advisories/2008/0425Broken Link
- www.vupen.com/english/advisories/2008/1966/referencesBroken LinkVendor Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299Broken Link
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource