CVE-2008-4813

Published: Nov 5, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.

Affected (8)

Products: Adobe: Acrobat, Acrobat Reader

2 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Up to 8.1.2
Adobe Acrobat	Version 8.1.1
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat	Version 8.1.1 unknown
Adobe Acrobat Reader	Up to 8.0

Related CWEs

References (40)

http://download.oracle.com/sunalerts/1019937.1.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/32700

Source: cve@mitre.org

http://secunia.com/advisories/32872

Source: cve@mitre.org

http://securityreason.com/securityalert/4564

Source: cve@mitre.org

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb08-19.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0974.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/498056/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/498057/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32100

Source: cve@mitre.org

http://www.securitytracker.com/id?1021140

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-309A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/3001

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0098

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-073/

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-074/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46333

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46344

Source: cve@mitre.org

http://download.oracle.com/sunalerts/1019937.1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32700

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32872

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/4564

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.adobe.com/support/security/bulletins/apsb08-19.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0974.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/498056/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/498057/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021140

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-309A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/3001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0098

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-08-073/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-08-074/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46333

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46344

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.