CVE-2007-5659

KEVAdobe Acrobat and Reader Buffer Overflow Vulnerability

Description

Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

CVSS 3.1 vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

PublishedFeb 12, 2008

Last modifiedJun 16, 2026

Added to KEVJun 8, 2022

Remediation dueJun 22, 2022

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=657Broken Link
secunia.com/advisories/29065Broken Link
secunia.com/advisories/29205Broken Link
secunia.com/advisories/30840Broken Link
security.gentoo.org/glsa/glsa-200803-01.xmlThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1Broken Link
adobe.com/support/security/advisories/apsa08-01.htmlVendor Advisory
adobe.com/support/security/bulletins/apsb08-13.htmlVendor Advisory
kb.cert.org/vuls/id/666281Third Party AdvisoryUS Government Resource
redhat.com/support/errata/RHSA-2008-0144.htmlBroken Link
us-cert.gov/cas/techalerts/TA08-043A.htmlBroken LinkThird Party Advisory
vupen.com/english/advisories/2008/1966/referencesBroken Link

0 recent articles mention this CVE

Risk assessment · High

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 1587 days
CVSS: 7.8 HIGH
EPSS (30-day exploit probability): 87.4% · top 1% of all CVEs
Weakness: CWE-120

Recommended actions

1.Apply updates per vendor instructions.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.