CVE-2008-2992
KEVRansomware UseAdobe Reader and Acrobat Input Validation Vulnerability
Description
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HPublishedNov 4, 2008
Last modifiedJun 16, 2026
Added to KEVMar 3, 2022
Remediation dueMar 24, 2022
References
- download.oracle.com/sunalerts/1019937.1.htmlThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlMailing ListThird Party Advisory
- osvdb.org/49520Broken Link
- secunia.com/advisories/29773Broken LinkVendor Advisory
- secunia.com/advisories/32700Broken LinkVendor Advisory
- secunia.com/advisories/32872Broken LinkVendor Advisory
- secunia.com/advisories/35163Broken LinkVendor Advisory
- secunia.com/secunia_research/2008-14/Broken LinkVendor Advisory
- securityreason.com/securityalert/4549Broken LinkExploit
- support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801Broken Link
- support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609Broken Link
- adobe.com/support/security/bulletins/apsb08-19.htmlBroken LinkPatch
0 recent articles mention this CVE
89
Risk assessment · Critical
Actively exploited and used by ransomware crews. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1678 days
- Ransomware
- Used in known ransomware campaigns
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 99.8% · top 1% of all CVEs
- Weakness
- CWE-787
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
- 4.Verify offline/immutable backups and segment the affected systems. This flaw is used for ransomware initial access.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.