Vulnerability Details : CVE-2008-2641
Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript method."
Vulnerability category: Execute codeDenial of service
Products affected by CVE-2008-2641
- cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.3:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.4:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.7:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.8:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1.1:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1.2:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.0:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.0:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.4:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.5:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.8:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.9:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1.2:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.2:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.3:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.6:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.7:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:8.1.1:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.1:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.1:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.2:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.5:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.6:*:professional:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0.9:*:standard:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_3d:7.0:*:professional:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-2641
24.89%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-2641
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2008-2641
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/43307
-
http://www.securitytracker.com/id?1020352
-
http://www.kb.cert.org/vuls/id/788019
US Government Resource
-
http://www.gentoo.org/security/en/glsa/glsa-200808-10.xml
-
http://www.redhat.com/support/errata/RHSA-2008-0641.html
-
http://www.vupen.com/english/advisories/2008/2289
-
http://www.adobe.com/support/security/bulletins/apsb08-15.html
Patch
-
http://www.securityfocus.com/bid/29908
Patch
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1
-
http://isc.sans.org/diary.html?storyid=4616
-
http://www.vupen.com/english/advisories/2008/1906
-
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html
[security-announce] SUSE Security Summary Report: SUSE-SR:2008:016 - openSUSE Security Announce - openSUSE Mailing Lists
Jump to