CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability

CVE-2007-5659 · Severity: critical · CVSS 9.3 · Exploited in the wild · Published 2022-06-08

Technologies: Adobe Acrobat, Adobe Reader, Adobe Flash Player, Adobe AIR. Vendors: Adobe.

Executive brief

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file containing long arguments to unspecified JavaScript methods. This vulnerability has been observed in the wild and is included in CISA's Known Exploited Vulnerabilities catalog.

Affected products

Adobe Acrobat 8.1.1 and earlier
Adobe Reader 8.1.1 and earlier

Timeline

2008-02-07: advisory: Adobe security advisory APSA08-01 published
2022-06-08: kev added: Added to CISA Known Exploited Vulnerabilities catalog

Related threats

Adobe Acrobat Reader denial-of-service via uncontrolled resource consumption
Adobe Acrobat Reader privilege escalation via incorrect authorization
Adobe Acrobat Reader prototype pollution arbitrary file read
Adobe Acrobat Reader heap buffer overflow in PDF parsing
Adobe Acrobat Reader heap-based buffer overflow