Vulnerability details

CVE-2008-0655

Actively exploited

Adobe Acrobat and Reader

CVSS 3.1

8.8High

Official description

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

CVSS scores

Score	Version	Source	Vector
8.8High	3.1	CISA ADP / Vulnrichment (CISA-ADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
No product information recorded.

References and advisories

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html vendor-advisoryx_refsource_SUSE
http://securitytracker.com/id?1019346 vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA08-043A.html third-party-advisoryx_refsource_CERT
http://www.adobe.com/support/security/bulletins/apsb08-13.html x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2008/1966/references vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/28851 third-party-advisoryx_refsource_SECUNIA
http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html x_refsource_CONFIRM
http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 x_refsource_CONFIRM
http://www.adobe.com/support/security/advisories/apsa08-01.html x_refsource_CONFIRM
http://secunia.com/advisories/28983 third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 vendor-advisoryx_refsource_SUNALERT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299 vdb-entrysignaturex_refsource_OVAL
http://security.gentoo.org/glsa/glsa-200803-01.xml vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/29065 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30840 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29205 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/27641 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2008/0425 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/28802 third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-0144.html vendor-advisoryx_refsource_REDHAT
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-0655 government-resource

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2008-02-07
Last updated: 2025-11-12
State: Published
Assigner (CNA): mitre
Kolun priority: 78 · High

CISA KEV catalog

Date added: 2022-06-08
Due date: 2022-06-22
Used in ransomware: Unknown

Exploit prediction (EPSS)

37.87%

Probability of exploitation in 30 days

98.5%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Active
Technical impact: Total

Weaknesses (CWE)

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor