CVE-2008-2992
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 4, 2008
Updated: Dec 19, 2024
CWE ID 787
Summary
CVE-2008-2992 is a stack-based buffer overflow vulnerability affecting Adobe Acrobat and Reader versions 8.1.2 and earlier. This issue arises due to a malformed format string argument in the util.printf JavaScript function, which can be exploited by remote attackers to execute arbitrary code. Notably, this vulnerability is related to CVE-2008-1104, but the specific exploit method involves different means to trigger the buffer overflow. Successful exploitation could result in the attacker gaining control over the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Reader XI
- Oracle Solaris
- Adobe Acrobat
- Adobe Acrobat Reader
Affected Vendors
- Adobe