CVE-2008-0655KEV · OVERDUE

Adobe Acrobat and Reader Unspecified Vulnerability

High · published February 7, 2008

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 98.5th percentile for exploit probability.

1583
days past CISA
deadline
CVSS v3.1
8.8
EPSS
38%
Percentile
98.5
In the wild
Confirmed
What it is

⚡ Adobe Reader and Acrobat before version 8.1.2 are hiding multiple vulnerabilities, like a magician with tricks up their sleeves that could unleash mischief at any moment! 🎩 Think of these vulnerabilities as secret passages in a building that your guests didn’t know existed — while they’re enjoying a party, someone could sneak in through those doors without anyone noticing. An attacker could exploit these unknown paths to cause chaos behind the scenes! If exploited, these vulnerabilities could allow an attacker to execute arbitrary code, potentially leading to data theft or system compromise. It's like handing over the keys to your entire digital vault without realizing it! 🤯

Put simply

Think of these vulnerabilities as secret passages in a building that your guests didn’t know existed — while they’re enjoying a party, someone could sneak in through those doors without anyone noticing. An attacker could exploit these unknown paths to cause chaos behind the scenes! These unspecified vulnerabilities in Adobe Reader and Acrobat allow unknown attack vectors that could be leveraged for unauthorized access or control. The exact nature of the flaws remains unclear, amplifying the risk.

What to do

If exploited, these vulnerabilities could allow an attacker to execute arbitrary code, potentially leading to data theft or system compromise. It's like handing over the keys to your entire digital vault without realizing it! 🤯 Upgrade to Adobe Reader and Acrobat version 8.1.2 or later immediately. Ensure you regularly check for updates to protect your system against these sneaky vulnerabilities. 🛡️ You've got this! Following these steps will bolster your defenses and keep your system secure. Let's tackle this vulnerability head-on! 💪🎉

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.37871 · 98.5th percentile
Published
2008-02-07T20:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 07 FEB 20:00Z
    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors
    cvelistv5