CVE-2007-5659
High · 7.8 CISA KEVCVSS
7.8
EPSS
87.4%
Published
Feb 12, 2008
CISA due date
Jun 22, 2022
The record
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | acroread | 0 | 0:8.1.2-1.el3.6 |
| Red Hat:rhel_extras:3 | acroread-plugin | 0 | 0:8.1.2-1.el3.6 |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:8.1.2-1.el4.2 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:8.1.2-1.el4.2 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:8.1.2-1.el5.3 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:8.1.2-1.el5.3 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:8.1.2-1.el5.3 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:8.1.2-1.el5.3 |
Related vulnerabilities
- CVE-2009-2994 Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x… Also affects acroread
- CVE-2009-2983 Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4… Also affects acroread
- CVE-2009-2990 Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and… Also affects acroread
- CVE-2009-2998 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3458 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3459 Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before… Also affects acroread
- CVE-2009-3431 Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and… Also affects acroread
- CVE-2009-1855 Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8… Also affects acroread