$ cve CVE-2008-2992 JSON

CVE-2008-2992 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 98.5% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-03-24.

Description

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	98.48% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-787
On CISA KEV	yes — remediate by 2022-03-24
Public exploit	yes
Published	2008-11-04
Last modified	2026-06-16

CISA KEV

Name	Adobe Reader and Acrobat Input Validation Vulnerability
Added	2022-03-03
Due	2022-03-24
Vendor / product	Adobe / Acrobat and Reader
Ransomware use	known

Affected (3)

Vendor	Product
adobe	acrobat
adobe	acrobat reader
oracle	solaris

Public exploits

Source	Title	Date
exploit-db	Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (2)	2010-09-25
exploit-db	Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (1)	2010-05-03
exploit-db	Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (1)	2008-11-05
exploit-db	Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (2)	2008-11-05

References

→ the Explorer · watch your stack · NVD