CVE-2008-0655

high-risk

Published 2008-02-07

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

Do I need to act?

68.8% chance of exploitation in next 30 days

EPSS score — higher than 31% of all CVEs

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Acrobat

Acrobat Reader

Adobe

Broken Link http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html

Vendor Advisory http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1

Broken Link http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html

Broken Link http://secunia.com/advisories/28802

Broken Link http://secunia.com/advisories/28851

Broken Link http://secunia.com/advisories/28983

Broken Link http://secunia.com/advisories/29065

Broken Link http://secunia.com/advisories/29205

Broken Link http://secunia.com/advisories/30840

Third Party Advisory http://security.gentoo.org/glsa/glsa-200803-01.xml

Broken Link http://securitytracker.com/id?1019346

Broken Link http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1

Vendor Advisory http://www.adobe.com/support/security/advisories/apsa08-01.html

Vendor Advisory http://www.adobe.com/support/security/bulletins/apsb08-13.html

Broken Link http://www.redhat.com/support/errata/RHSA-2008-0144.html

Broken Link http://www.securityfocus.com/bid/27641

Broken Link http://www.us-cert.gov/cas/techalerts/TA08-043A.html

Broken Link http://www.vupen.com/english/advisories/2008/0425

Broken Link http://www.vupen.com/english/advisories/2008/1966/references

Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...

and 21 more references

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 26/34 · High

Exposure 7/34 · Low