{"id":"CVE-2008-0655","kind":"vulnerability","aliases":["CVE-2008-0655"],"related":[],"title":"Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors","description":"Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Adobe Acrobat and Reader have a design flaw where a specially crafted PDF can be printed silently many times. An attacker gets to make the victim's printer produce unwanted output, which is a nuisance rather than code execution.","severity":"critical","cvss":9.3,"epss":0.37871,"exploited":true,"exploited_at":"2022-06-08T00:00:00+00:00","products":[{"name":"Adobe Acrobat and Reader","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"adobe acrobat","fixed":["8.1.2"],"affected":"< 8.1.2","ecosystem":"vendor"},{"name":"adobe acrobat reader","fixed":["8.1.2"],"affected":"< 8.1.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-acrobat","adobe-reader","exploited","macos","package","windows"],"not_affected_if":["no-acrobat-or-reader-installed"],"how_to_check":"Check the installed Acrobat or Reader version under Help > About in the application; the sources do not give the affected version range.","fix":"Apply the update Adobe provides for Acrobat and Reader, as CISA requires; the sources do not name the fixed version.","status":"open","published_at":"2008-02-07T21:00:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:42+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T21:12:42Z","model":"claude-haiku-5-5","output":{"fix":"Apply the update Adobe provides for Acrobat and Reader, as CISA requires; the sources do not name the fixed version.\nunknown","reach":"local","impact":"low","summary":"Adobe Acrobat and Reader have a design flaw where a specially crafted PDF can be printed silently many times. An attacker gets to make the victim's printer produce unwanted output, which is a nuisance rather than code execution.","category":"package","who_cares":["adobe-acrobat","adobe-reader","windows","macos"],"confidence":0.6,"needs_auth":"no","worst_case":"Victim's printer prints a crafted document an arbitrary number of times","analyst_note":"Confirm affected and fixed Acrobat/Reader versions from Adobe's bulletin for CVE-2008-0655; sources give no version data.","how_to_check":"Check the installed Acrobat or Reader version under Help > About in the application; the sources do not give the affected version range.\nunknown","needs_analyst":true,"not_affected_if":["no-acrobat-or-reader-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000486,"input_tokens":2849,"output_tokens":402,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0655':19A,22A '-2008':18A,21A '8.1.2':10A 'acrobat':8A,24A,28A,30A,34B,43B,82C 'action':112C 'adob':5A,33B,36B,42B,81C 'adobe':23A,27A,29A 'adobe-acrobat':32B 'adobe-read':35B 'allow':96C 'and':25A 'appli':113C 'arbitrari':106C 'attack':15A,62B 'cisa':110C 'code':79B 'contain':85C 'could':95C 'craft':53B,99C 'cve':17A,20A 'describ':89C 'design':48B,92C 'execut':80B 'exploit':38B 'file':100C 'flaw':49B,93C 'get':63B 'impact':13A 'instruct':117C 'maco':39B 'make':65B 'mani':59B 'multipl':1A 'nuisanc':76B 'number':107C 'output':72B 'packag':40B 'pdf':54B 'per':115C 'print':57B,103C 'printer':69B 'produc':70B 'rather':77B 'reader':6A,26A,31A,37B,45B,84C 'requir':111C 'silent':58B,104C 'special':52B,98C 'time':60B,109C 'unespecifi':87C 'unknown':12A 'unspecifi':2A 'unwant':71B 'updat':114C 'vector':16A 'vendor':116C 'victim':67B 'vulner':3A,88C 'window':41B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2008-02-07T21:00:00+00:00","kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2008-0655","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0655","severity":null,"published_at":"2022-06-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:57+00:00","note":null},{"source":"epss","external_id":"CVE-2008-0655","url":"https://api.first.org/data/v1/epss?cve=CVE-2008-0655","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2008-0655","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0655","severity":null,"published_at":"2008-02-07T21:00:00+00:00","modified_at":"2026-06-16T22:50:04+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}