$ cve CVE-2007-5659 JSON

CVE-2007-5659 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 87.4% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-22.

Description

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	87.42% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-120
On CISA KEV	yes — remediate by 2022-06-22
Public exploit	yes
Published	2008-02-12
Last modified	2026-06-16

CISA KEV

Name	Adobe Acrobat and Reader Buffer Overflow Vulnerability
Added	2022-06-08
Due	2022-06-22
Vendor / product	Adobe / Acrobat and Reader
Ransomware use	none reported

Affected (2)

Vendor	Product
adobe	acrobat
adobe	acrobat reader

Public exploits

Source	Title	Date
exploit-db	Adobe - 'Collab.collectEmailInfo()' Local Buffer Overflow (Metasploit)	2010-09-25
exploit-db	Adobe Acrobat and Reader 8.1.1 - Multiple Arbitrary Code Execution / Security Vulnerabilities	2008-02-06

References

→ the Explorer · watch your stack · NVD