CVE-2008-4817
Fixed in a distro release EPSS 11%
The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.
Products: adobe acrobat, adobe acrobat_reader
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | acroread | 0:8.1.3-1 |
| Red Hat rhel extras 3 | acroread-plugin | 0:8.1.3-1 |
| Red Hat rhel extras 4 | acroread | 0:8.1.3-1.el4 |
| Red Hat rhel extras 4 | acroread-plugin | 0:8.1.3-1.el4 |
| Red Hat rhel extras 5 | acroread | 0:8.1.3-1.el5 |
| Red Hat rhel extras 5 | acroread-plugin | 0:8.1.3-1.el5 |