CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“3 of 3 advisories (Page 1/1)
CVE-2009-39538.8/HIGHEPSS 83.2%CISA KEV
2010-01-13

Adobe Reader and Acrobat U3D CLODProgressiveMeshDeclaration Out-of-Bounds Write Vulnerability (CVE-2009-3953)

[Affected Scope] Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2, and 7.x before 7.1.4 on Windows and Mac OS X

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document containing malformed U3D data

[Mitigation] Apply the official vendor security patches immediately, or disable 3D/U3D rendering features via registry policies

CVE-2008-29927.8/HIGHEPSS 99.8%CISA KEV
2008-11-04

Adobe Acrobat and Reader util.printf Stack-Based Buffer Overflow (CVE-2008-2992)

[Affected Scope] Adobe Acrobat and Reader 8.1.2 and earlier

[Impact] Remote attackers can execute arbitrary code on the target system via a crafted PDF file

[Mitigation] Upgrade to the latest patched version or disable JavaScript execution within PDF documents

CVE-2007-56597.8/HIGHEPSS 87.4%CISA KEV
2008-02-12

Adobe Reader and Acrobat Buffer Overflow Remote Code Execution Vulnerability (CVE-2007-5659)

[Affected Scope] Adobe Reader and Acrobat 8.1.1 and earlier

[Impact] Remote attackers can execute arbitrary code via a specially crafted PDF file containing malicious JavaScript

[Mitigation] Upgrade to the latest patched version or disable JavaScript execution within Adobe Reader/Acrobat

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse