CVE-2007-5659
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
Adobe Reader and Acrobat versions 8.1.1 and earlier contain buffer overflow vulnerabilities in JavaScript methods when processing PDF files with excessively long arguments, allowing attackers to run arbitrary code by sending a malicious PDF.
Multiple buffer overflows exist in Adobe Reader/Acrobat ≤8.1.1 JavaScript engine when handling long arguments to unspecified methods. Attack vector is local/remote via crafted PDF files; exploitation requires user to open the malicious PDF. Successful exploitation leads to arbitrary code execution with user privileges.
The full analysis of this CVE is available in Portuguese →