Vulnerability in N/a
CVE-2008-2549
Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.
EPSS: 0.719 (98.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 32700 (x_refsource_SECUNIA, third-party-advisory)
- support.nortel.com/go/main.jsp (x_refsource_CONFIRM)
- www.adobe.com/support/security/bulletins/apsb09-04.html (x_refsource_CONFIRM)
- 35163 (x_refsource_SECUNIA, third-party-advisory)
- 249366 (vendor-advisory, x_refsource_SUNALERT)
- 32872 (x_refsource_SECUNIA, third-party-advisory)
- acrobatreader-pdf-dos(42886) (vdb-entry, x_refsource_XF)
- www.adobe.com/support/security/bulletins/apsb08-19.html (x_refsource_CONFIRM)
- 5687 (exploit, x_refsource_EXPLOIT-DB)
- 29420 (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2008-2549?
- CVE-2008-2549 is a vulnerability in N/a. Published 2008-06-04.
- Is CVE-2008-2549 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.