超危

Adobe Acrobat Reader多个未明漏洞

2008-02-07 20:00:00 公开，2025-11-12 15:06:33 更新

关键漏洞
CISA KEV
远程
无需认证
公开PoC
CWE Top 25 (2024)

CWEs：: CWE-200 （Exposure of Sensitive Information to an Unauthorized Actor）
SSVC：: 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2025-11-12 22:18:33

风险信息

CVSS v2 向量: AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v2 风险值: 9.3
CVSS v3.1 向量: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1 风险值: 9.8

详细信息

漏洞类型: 其他
漏洞描述: Adobe Acrobat Reader都是流行的PDF文件阅读器。Adobe Reader and Acrobat 8.1.2 之前的版本存在多个未知漏洞，使用未知攻击载体并造成未知影响。
修复建议: 目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接： http://www.adobe.com/support/downloads/thankyou.jsp?ftpid=3849&fileid=3603 http://www.adobe.com/support/downloads/thankyou.jsp?ftpid=3856&fileid=3602 http://www.adobe.com/products/acrobat/readstep2_servefile.HTML

参考链接

http://www.us-cert.gov/cas/techalerts/TA08-043A.html
NVD · third-party-advisory · x_refsource_CERT
http://www.redhat.com/support/errata/RHSA-2008-0144.html
NVD · vendor-advisory · x_refsource_REDHAT
http://www.adobe.com/support/security/advisories/apsa08-01.html
NVD · x_refsource_CONFIRM
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
NVD · vendor-advisory · x_refsource_SUNALERT
http://securitytracker.com/id?1019346
NVD · vdb-entry · x_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
NVD · vendor-advisory · x_refsource_SUSE
http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
NVD · x_refsource_CONFIRM
http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html
NVD · x_refsource_CONFIRM
http://www.adobe.com/support/security/bulletins/apsb08-13.html
NVD · x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-200803-01.xml
NVD · vendor-advisory · x_refsource_GENTOO
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299
NVD · vdb-entry · signature · x_refsource_OVAL
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-0655
NVD · US Government Resource