Vulnerability-Lookup

CVE-2008-4812 (GCVE-0-2008-4812)

Vulnerability from cvelistv5 – Published: 2008-11-05 14:51 – Updated: 2024-08-07 10:31

Summary

Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://secunia.com/advisories/32700	third-party-advisoryx_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/32100	vdb-entryx_refsource_BID
http://secunia.com/advisories/35163	third-party-advisoryx_refsource_SECUNIA
http://download.oracle.com/sunalerts/1019937.1.html	vendor-advisoryx_refsource_SUNALERT
http://secunia.com/advisories/32872	third-party-advisoryx_refsource_SECUNIA
http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/0098	vdb-entryx_refsource_VUPEN
http://www.us-cert.gov/cas/techalerts/TA08-309A.html	third-party-advisoryx_refsource_CERT
http://www.securitytracker.com/id?1021140	vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/3001	vdb-entryx_refsource_VUPEN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM

Date Public

2008-11-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.825Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "32700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "name": "adobe-acrobatreader-type1font-code-execution(46332)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
          },
          {
            "name": "32100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "35163",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "name": "249366",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "32700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "name": "adobe-acrobatreader-type1font-code-execution(46332)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
        },
        {
          "name": "32100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "name": "35163",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "name": "249366",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "name": "32872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "name": "ADV-2009-0098",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "name": "TA08-309A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "name": "1021140",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "name": "ADV-2008-3001",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "name": "SUSE-SR:2008:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "name": "RHSA-2008:0974",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4812",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
            },
            {
              "name": "adobe-acrobatreader-type1font-code-execution(46332)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "35163",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35163"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4812",
    "datePublished": "2008-11-05T14:51:00.000Z",
    "dateReserved": "2008-10-31T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:31:27.825Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2008-4812",
      "date": "2026-09-18",
      "epss": "0.08799",
      "percentile": "0.94932"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*",
                  "matchCriteriaId": "E3E09C95-5726-486C-86C6-F1E98D281DDD",
                  "versionEndIncluding": "8.1.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*",
                  "matchCriteriaId": "FF117631-0095-4139-AFAC-D2C9050674AD",
                  "versionEndIncluding": "8.1.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*",
                  "matchCriteriaId": "3AA6AB66-8399-41E9-9688-7EEC083AFEBB",
                  "versionEndIncluding": "8.1.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*",
                  "matchCriteriaId": "C05B37C5-3043-4398-B009-7FFD5AF9D9FA",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*",
                  "matchCriteriaId": "73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*",
                  "matchCriteriaId": "A72B429E-3C05-49A2-8097-72D968473B3A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "612599DD-94C9-4ECF-8986-C3BF355779B4",
                  "versionEndIncluding": "8.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
        },
        {
          "lang": "es",
          "value": "Error de \u00edndice de array en Adobe Reader y Acrobat, y la extensi\u00f3n de Explorer (tambi\u00e9n conocida como AcroRd32Info), v8.1.2, v8.1.1 y anteriores; permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento PDF manipulado que provoca una escritura fuera de rango. Est\u00e1 relacionado con la validaci\u00f3n de Tipo de fuentes 1."
        }
      ],
      "id": "CVE-2008-4812",
      "lastModified": "2024-11-21T00:52:37.767",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 9.3,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": true
          }
        ]
      },
      "published": "2008-11-05T15:00:14.460",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://download.oracle.com/sunalerts/1019937.1.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/32700"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/32872"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/35163"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/32100"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securitytracker.com/id?1021140"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2008/3001"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2009/0098"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-20"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*",
                    "matchCriteriaId": "E3E09C95-5726-486C-86C6-F1E98D281DDD",
                    "versionEndIncluding": "8.1.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*",
                    "matchCriteriaId": "FF117631-0095-4139-AFAC-D2C9050674AD",
                    "versionEndIncluding": "8.1.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*",
                    "matchCriteriaId": "3AA6AB66-8399-41E9-9688-7EEC083AFEBB",
                    "versionEndIncluding": "8.1.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*",
                    "matchCriteriaId": "C05B37C5-3043-4398-B009-7FFD5AF9D9FA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*",
                    "matchCriteriaId": "73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*",
                    "matchCriteriaId": "A72B429E-3C05-49A2-8097-72D968473B3A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "612599DD-94C9-4ECF-8986-C3BF355779B4",
                    "versionEndIncluding": "8.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
          },
          {
            "lang": "es",
            "value": "Error de \u00edndice de array en Adobe Reader y Acrobat, y la extensi\u00f3n de Explorer (tambi\u00e9n conocida como AcroRd32Info), v8.1.2, v8.1.1 y anteriores; permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento PDF manipulado que provoca una escritura fuera de rango. Est\u00e1 relacionado con la validaci\u00f3n de Tipo de fuentes 1."
          }
        ],
        "id": "CVE-2008-4812",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2008-11-05T15:00:14.460",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Critical",
      "current_release_date": "2026-06-28T11:40:10+00:00",
      "cve": "CVE-2008-4812",
      "id": "CVE-2008-4812",
      "initial_release_date": "2008-11-04T00:00:00+00:00",
      "product_status:fixed": "20",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Reader: embedded font handling out-of-bounds array indexing",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2008/cve-2008-4812.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2025-10-31T01:08:25Z",
      "cve": "CVE-2008-4812",
      "id": "CVE-2008-4812",
      "initial_release_date": "2023-02-15T06:06:44Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2008-4812",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2008-4812.json",
      "version": "6"
    }
  }
}

CERTA-2008-AVI-541

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités affectent les produits Adobe Acrobat et Adobe Reader permettant, entre autres, à une personne malveillante d'exécuter du code arbitraire à distance.

Description

De multiples vulnérabilités ont été découvertes dans Adobe Acrobat et Adobe Reader :

plusieurs erreurs dans la validation des données permettent une exécution, locale ou à distance, de code arbitraire ;
deux erreurs dans le traitement de certaines données par le gestionnaire de téléchargement d'Adobe Reader permettent de modifier les options de sécurité de l'utilisateur pendant le processus de téléchargement ;
une erreur dans la traitement de données par une méthode JavaScript permet une exécution de code arbitraire à distance ;
une vulnérabilité non documentée permet une élévation de privilèges ;
une vulnérabilité permet un déni de service via un document PDF spécialement conçu.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Adobe	Acrobat	Adobe Reader 8.x.
Adobe	Acrobat	Adobe Acrobat 3D 3.x ;
Adobe	Acrobat	Adobe Acrobat 8.x ;
Adobe	Acrobat	Adobe Acrobat 8 Professional ;

References

Title

Publication Time

CERTA-2008-AVI-541

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités affectent les produits Adobe Acrobat et Adobe Reader permettant, entre autres, à une personne malveillante d'exécuter du code arbitraire à distance.

Description

De multiples vulnérabilités ont été découvertes dans Adobe Acrobat et Adobe Reader :

plusieurs erreurs dans la validation des données permettent une exécution, locale ou à distance, de code arbitraire ;
deux erreurs dans le traitement de certaines données par le gestionnaire de téléchargement d'Adobe Reader permettent de modifier les options de sécurité de l'utilisateur pendant le processus de téléchargement ;
une erreur dans la traitement de données par une méthode JavaScript permet une exécution de code arbitraire à distance ;
une vulnérabilité non documentée permet une élévation de privilèges ;
une vulnérabilité permet un déni de service via un document PDF spécialement conçu.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Adobe	Acrobat	Adobe Reader 8.x.
Adobe	Acrobat	Adobe Acrobat 3D 3.x ;
Adobe	Acrobat	Adobe Acrobat 8.x ;
Adobe	Acrobat	Adobe Acrobat 8 Professional ;

References

Title

Publication Time

FKIE_CVE-2008-4812

Vulnerability from fkie_nvd - Published: 2008-11-05 15:00 - Updated: 2026-06-16 22:58

Severity

Summary

References

URL	Tags
cve@mitre.org	http://download.oracle.com/sunalerts/1019937.1.html
cve@mitre.org	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
cve@mitre.org	http://secunia.com/advisories/32700
cve@mitre.org	http://secunia.com/advisories/32872
cve@mitre.org	http://secunia.com/advisories/35163
cve@mitre.org	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
cve@mitre.org	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609
cve@mitre.org	http://www.adobe.com/support/security/bulletins/apsb08-19.html	Patch, Vendor Advisory
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0974.html
cve@mitre.org	http://www.securityfocus.com/bid/32100
cve@mitre.org	http://www.securitytracker.com/id?1021140
cve@mitre.org	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	US Government Resource
cve@mitre.org	http://www.vupen.com/english/advisories/2008/3001
cve@mitre.org	http://www.vupen.com/english/advisories/2009/0098
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/46332
af854a3a-2127-422b-91ae-364da2661108	http://download.oracle.com/sunalerts/1019937.1.html
af854a3a-2127-422b-91ae-364da2661108	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/32700
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/32872
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/35163
af854a3a-2127-422b-91ae-364da2661108	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
af854a3a-2127-422b-91ae-364da2661108	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609
af854a3a-2127-422b-91ae-364da2661108	http://www.adobe.com/support/security/bulletins/apsb08-19.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0974.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/32100
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1021140
af854a3a-2127-422b-91ae-364da2661108	http://www.us-cert.gov/cas/techalerts/TA08-309A.html	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/3001
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2009/0098
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/46332

Impacted products

Vendor	Product	Version
adobe	acrobat	*
adobe	acrobat	*
adobe	acrobat	*
adobe	acrobat	8.1.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.1
adobe	acrobat_reader	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*",
              "matchCriteriaId": "E3E09C95-5726-486C-86C6-F1E98D281DDD",
              "versionEndIncluding": "8.1.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*",
              "matchCriteriaId": "FF117631-0095-4139-AFAC-D2C9050674AD",
              "versionEndIncluding": "8.1.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*",
              "matchCriteriaId": "3AA6AB66-8399-41E9-9688-7EEC083AFEBB",
              "versionEndIncluding": "8.1.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*",
              "matchCriteriaId": "C05B37C5-3043-4398-B009-7FFD5AF9D9FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*",
              "matchCriteriaId": "73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*",
              "matchCriteriaId": "A72B429E-3C05-49A2-8097-72D968473B3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "612599DD-94C9-4ECF-8986-C3BF355779B4",
              "versionEndIncluding": "8.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
    },
    {
      "lang": "es",
      "value": "Error de \u00edndice de array en Adobe Reader y Acrobat, y la extensi\u00f3n de Explorer (tambi\u00e9n conocida como AcroRd32Info), v8.1.2, v8.1.1 y anteriores; permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento PDF manipulado que provoca una escritura fuera de rango. Est\u00e1 relacionado con la validaci\u00f3n de Tipo de fuentes 1."
    }
  ],
  "id": "CVE-2008-4812",
  "lastModified": "2026-06-16T22:58:35.383",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2008-11-05T15:00:14.460",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://download.oracle.com/sunalerts/1019937.1.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32700"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32872"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/35163"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/32100"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1021140"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/3001"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2009/0098"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://download.oracle.com/sunalerts/1019937.1.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32700"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32872"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/35163"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/32100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1021140"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/3001"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2009/0098"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-65HV-RXC9-C75Q

Vulnerability from github – Published: 2022-05-14 02:16 – Updated: 2022-05-14 02:16

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2008-4812"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2008-11-05T15:00:00Z",
    "severity": "HIGH"
  },
  "details": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.",
  "id": "GHSA-65hv-rxc9-c75q",
  "modified": "2022-05-14T02:16:58Z",
  "published": "2022-05-14T02:16:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4812"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
    },
    {
      "type": "WEB",
      "url": "http://download.oracle.com/sunalerts/1019937.1.html"
    },
    {
      "type": "WEB",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/32700"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/32872"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/35163"
    },
    {
      "type": "WEB",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
    },
    {
      "type": "WEB",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
    },
    {
      "type": "WEB",
      "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/32100"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1021140"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/3001"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2009/0098"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2008-4812

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2008-4812

Aliases

CVE-2008-4812

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2008-4812",
    "description": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.",
    "id": "GSD-2008-4812",
    "references": [
      "https://www.suse.com/security/cve/CVE-2008-4812.html",
      "https://access.redhat.com/errata/RHSA-2008:0974"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2008-4812"
      ],
      "details": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.",
      "id": "GSD-2008-4812",
      "modified": "2023-12-13T01:22:59.531615Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2008-4812",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "32700",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/32700"
          },
          {
            "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
            "refsource": "CONFIRM",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
          },
          {
            "name": "adobe-acrobatreader-type1font-code-execution(46332)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
          },
          {
            "name": "32100",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/32100"
          },
          {
            "name": "35163",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/35163"
          },
          {
            "name": "249366",
            "refsource": "SUNALERT",
            "url": "http://download.oracle.com/sunalerts/1019937.1.html"
          },
          {
            "name": "32872",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/32872"
          },
          {
            "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
            "refsource": "IDEFENSE",
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
          },
          {
            "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
            "refsource": "CONFIRM",
            "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
          },
          {
            "name": "ADV-2009-0098",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2009/0098"
          },
          {
            "name": "TA08-309A",
            "refsource": "CERT",
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
          },
          {
            "name": "1021140",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1021140"
          },
          {
            "name": "ADV-2008-3001",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/3001"
          },
          {
            "name": "SUSE-SR:2008:026",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
          },
          {
            "name": "RHSA-2008:0974",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
          },
          {
            "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
            "refsource": "CONFIRM",
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.1.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.1.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.1.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4812"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.adobe.com/support/security/bulletins/apsb08-19.html"
            },
            {
              "name": "32100",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/32100"
            },
            {
              "name": "20081104 Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability",
              "refsource": "IDEFENSE",
              "tags": [],
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755"
            },
            {
              "name": "32872",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/32872"
            },
            {
              "name": "SUSE-SR:2008:026",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html"
            },
            {
              "name": "TA08-309A",
              "refsource": "CERT",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-309A.html"
            },
            {
              "name": "32700",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/32700"
            },
            {
              "name": "RHSA-2008:0974",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0974.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=909609"
            },
            {
              "name": "35163",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/35163"
            },
            {
              "name": "ADV-2009-0098",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2009/0098"
            },
            {
              "name": "ADV-2008-3001",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2008/3001"
            },
            {
              "name": "1021140",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1021140"
            },
            {
              "name": "249366",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://download.oracle.com/sunalerts/1019937.1.html"
            },
            {
              "name": "adobe-acrobatreader-type1font-code-execution(46332)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46332"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-30T16:25Z",
      "publishedDate": "2008-11-05T15:00Z"
    }
  }
}

RHSA-2008:0974

Vulnerability from csaf_redhat - Published: 2008-11-12 17:26 - Updated: 2026-06-28 12:17

Summary

Red Hat Security Advisory: acroread security update

Severity

Critical

Scope

8 vulnerabilities in this advisory, including CVE-2008-4812.

CVE-2008-4812

Fixed: 20 products

https://access.redhat.com/errata/RHSA-2008:0974

Open the full advisory

RHSA-2008_0974

Vulnerability from csaf_redhat - Published: 2008-11-12 17:26 - Updated: 2024-11-14 10:06

Summary

Red Hat Security Advisory: acroread security update

Severity

Critical

Scope

8 vulnerabilities in this advisory, including CVE-2008-4812.

CVE-2008-4812

Fixed: 20 products

https://access.redhat.com/errata/RHSA-2008:0974

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2008-4812 (GCVE-0-2008-4812)

CERTA-2008-AVI-541

Description

Solution

CERTA-2008-AVI-541

Description

Solution

FKIE_CVE-2008-4812

GHSA-65HV-RXC9-C75Q

GSD-2008-4812

RHSA-2008:0974

RHSA-2008_0974

Tags

Sightings

Nomenclature

Related by attack behaviour