QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-2042

Back to search

CVE-2008-2042

Published: May 8, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.

VendorProductVersions

n/a

n/a

affected
n/a

References

3861
third-party-advisory
x_refsource_SREASON
ADV-2008-1966
vdb-entry
x_refsource_VUPEN
239286
vendor-advisory
x_refsource_SUNALERT
30840
third-party-advisory
x_refsource_SECUNIA
1019971
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now