high7.8Known exploitedPublic exploit code

CVE-2007-5659

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-06-08. Federal due date: 2022-06-22.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Adobe Acrobat and Reader 8.1.1 - Multiple Arbitrary Code Execution / Security Vulnerabilities2008-02-06 · dos · windows · Verified
Adobe - 'Collab.collectEmailInfo()' Local Buffer Overflow (Metasploit)2010-09-25 · local · windows · Verified

Impact

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

Affected products

Vendor	Product	Affected versions
Adobe	Acrobat	before 8.1.2
Adobe	Acrobat Reader	before 8.1.2

Weakness classification

CWE-120

Exploited in the wild

Public exploit code

Impact

Affected products

Weakness classification

References