Live › vulnerability › CVE-2008-2992
Go to dashboardAdobe Acrobat and Reader have an input validation flaw in a JavaScript method that can be abused to run code on the machine. Attackers are exploiting it in the wild, and CISA lists it as ransomware-linked.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Acrobat and Reader | vendor | – | – |
Unknown from the sources.
Apply the Adobe update for Acrobat and Reader per vendor instructions; the specific fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.
This page as .md · .json · in your agent: get_signal("CVE-2008-2992")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.