← Back

CVE-2008-2042

nvd nist
Published: May 8, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.

Affected (76)

2 products
Acrobat
Acrobat Reader
Configuration A
35 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Up to 8.1.1
Version 3.0
Version 3.1
Version 4.0.5
Version 4.0.5a
Version 4.0.5c
Version 4.0
Version 5.0.10
Version 5.0.5
Version 5.0.6
Version 5.0
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0
Version 7.0.1
Version 7.0.2
Version 7.0.3
Version 7.0.4
Version 7.0.5
Version 7.0.6
Version 7.0.7
Version 7.0.8
Version 7.0.9
Version 7.0
Version 7.1.0
Version 7.1.1
Version 7.1.2
Version 7.1.3
Version 7.1.4
Version 8.0
Version 8.1
Configuration B
41 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Up to 8.1.1
Version 3.01
Version 3.02
Version 3.0
Version 4.0.5
Version 4.0.5a
Version 4.0.5c
Version 4.0
Version 4.5
Version 5.0.10
Version 5.0.11
Version 5.0.5
Version 5.0.6
Version 5.0.7
Version 5.0.9
Version 5.0
Version 5.1
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0
Version 7.0.1
Version 7.0.2
Version 7.0.3
Version 7.0.4
Version 7.0.5
Version 7.0.6
Version 7.0.7
Version 7.0.8
Version 7.0.9
Version 7.0
Version 7.1.0
Version 7.1.1
Version 7.1.2
Version 7.1.3
Version 7.1.4
Version 8.0
Version 8.1

References (16)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.