← All CVEs

CVE-2008-2549

medium · 4.3

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.

4.3
CVSS
52.6%
EPSS (exploit prob.)
99th
EPSS percentile
2008-06-04
Published

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
adobeacrobat_reader<= 8.1.2
adobeacrobat_reader3.0
adobeacrobat_reader4.0
adobeacrobat_reader4.0.5
adobeacrobat_reader4.5
adobeacrobat_reader5.0
adobeacrobat_reader5.0.5
adobeacrobat_reader5.0.6
adobeacrobat_reader5.0.7
adobeacrobat_reader5.0.9
adobeacrobat_reader5.0.10
adobeacrobat_reader5.0.11
adobeacrobat_reader5.1
adobeacrobat_reader6.0
adobeacrobat_reader6.0.1
adobeacrobat_reader6.0.2
adobeacrobat_reader6.0.3
adobeacrobat_reader6.0.4
adobeacrobat_reader6.0.5
adobeacrobat_reader7.0
adobeacrobat_reader7.0.1
adobeacrobat_reader7.0.2
adobeacrobat_reader7.0.3
adobeacrobat_reader7.0.4
adobeacrobat_reader7.0.5
adobeacrobat_reader7.0.6
adobeacrobat_reader7.0.7
adobeacrobat_reader7.0.8
adobeacrobat_reader7.0.9
adobeacrobat_reader8.0
adobeacrobat_reader8.1
adobeacrobat_reader8.1.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-2549