CVE-2008-4812

Published: Nov 5, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.

Affected (8)

Products: Adobe: Acrobat, Acrobat Reader

2 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Version 8.1.1
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat Reader	Up to 8.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://download.oracle.com/sunalerts/1019937.1.html

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/32700

Source: cve@mitre.org

http://secunia.com/advisories/32872

Source: cve@mitre.org

http://secunia.com/advisories/35163

Source: cve@mitre.org

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801

Source: cve@mitre.org

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb08-19.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0974.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/32100

Source: cve@mitre.org

http://www.securitytracker.com/id?1021140

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-309A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/3001

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0098

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46332

Source: cve@mitre.org

http://download.oracle.com/sunalerts/1019937.1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32872

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35163

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.adobe.com/support/security/bulletins/apsb08-19.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0974.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021140

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-309A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/3001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0098

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46332

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.