Skip to content
OpenAdvisories
High 2 exploited CVEs RHSA-2008:0144 7 CVEs

Red Hat Security Advisory: acroread security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_extras:3 acroread 0:8.1.2-1.el3.6
Red Hat · RHEL 3 rhel_extras:3 acroread-plugin 0:8.1.2-1.el3.6
Red Hat · RHEL 4 rhel_extras:4 acroread 0:8.1.2-1.el4.2
Red Hat · RHEL 4 rhel_extras:4 acroread-plugin 0:8.1.2-1.el4.2
Red Hat · RHEL 5 rhel_extras:5::client acroread 0:8.1.2-1.el5.3
Red Hat · RHEL 5 rhel_extras:5::client acroread-plugin 0:8.1.2-1.el5.3
Red Hat · RHEL 5 rhel_extras:5::server acroread 0:8.1.2-1.el5.3
Red Hat · RHEL 5 rhel_extras:5::server acroread-plugin 0:8.1.2-1.el5.3

Vulnerabilities 7

  • High 8.8
    CVE-2008-0655 Exploited EPSS 38%

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    KEV Jun 8, 2022
  • High 7.8
    CVE-2007-5659 Exploited Public exploit EPSS 87%

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2007-0044 Public exploit EPSS 57%

    Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attac…

  • Unscored —
    CVE-2007-5663 EPSS 13%

    Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file tha…

  • Unscored —

    Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitra…

  • Unscored —

    The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote att…

  • Unscored —
    CVE-2008-0726 EPSS 15%

    Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via cr…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=223113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431985
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432471
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432757
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0144.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0044
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0044
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0044
  • report
    https://access.redhat.com/security/cve/CVE-2007-5659
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5659
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5659
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2007-5663
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5663
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5663
  • report
    https://access.redhat.com/security/cve/CVE-2007-5666
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5666
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5666
  • report
    https://access.redhat.com/security/cve/CVE-2008-0655
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0655
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0655
  • report
    https://access.redhat.com/security/cve/CVE-2008-0667
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0667
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0667
  • report
    https://access.redhat.com/security/cve/CVE-2008-0726
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0726
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0726