CVE-2008-2992

CVE-2008-2992 is a high-severity (CVSS 7.8) vulnerability in Adobe Acrobat and Reader. CISA added it to the Known Exploited Vulnerabilities catalog on March 3, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by March 24, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Adobe has 83 vulnerabilities in the KEV catalog, 11 of them linked to ransomware.

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

• http://download.oracle.com/sunalerts/1019937.1.html
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
• http://osvdb.org/49520
• http://secunia.com/advisories/29773
• http://secunia.com/advisories/32700
• http://secunia.com/advisories/32872
• http://secunia.com/advisories/35163
• http://secunia.com/secunia_research/2008-14/