CVE-2008-0655highunder attackCWE-200

CVE-2008-0655

Published · Updated

Follow this CVE+ Monitor Adobe Acrobat+ Monitor Reader Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 38%
from disclosure to weapon
Published on NVDFeb 7
CISA KEV+5235d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
10 products (20 components)
Red Hat Desktop version 3 Extras · Red Hat Desktop version 4 Extras · Red Hat Enterprise Linux AS version 3 Extras · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux Desktop Supplementary (v. 5) · and others 5
fix ↗
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

Adobe Reader and Acrobat versions before 8.1.2 contain multiple unspecified security flaws that could allow attackers to compromise affected systems. The exact nature and attack methods are not detailed, but the high severity rating indicates significant risk.

Technical detail

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat prior to 8.1.2 result in information disclosure (CWE-200). Attack vectors and preconditions are not explicitly documented in the advisory, but exploitation could lead to unauthorized access or data leakage depending on the specific flaw.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a