Skip to content
OpenAdvisories
High 2 exploited CVEs RHSA-2008:0974 8 CVEs

Red Hat Security Advisory: acroread security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_extras:3 acroread 0:8.1.3-1
Red Hat · RHEL 3 rhel_extras:3 acroread-plugin 0:8.1.3-1
Red Hat · RHEL 4 rhel_extras:4 acroread 0:8.1.3-1.el4
Red Hat · RHEL 4 rhel_extras:4 acroread-plugin 0:8.1.3-1.el4
Red Hat · RHEL 5 rhel_extras:5::client acroread 0:8.1.3-1.el5
Red Hat · RHEL 5 rhel_extras:5::client acroread-plugin 0:8.1.3-1.el5
Red Hat · RHEL 5 rhel_extras:5::server acroread 0:8.1.3-1.el5
Red Hat · RHEL 5 rhel_extras:5::server acroread-plugin 0:8.1.3-1.el5

Vulnerabilities 8

  • High 8.8
    CVE-2009-0927 Exploited Public exploit EPSS 97%

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

    KEV Mar 25, 2022
  • High 7.8
    CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2008-2549 Public exploit EPSS 53%

    Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2008-4812 EPSS 11%

    Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier…

  • Unscored —
    CVE-2008-4813 EPSS 17%

    Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a cr…

  • Unscored —
    CVE-2008-4814 EPSS 19%

    Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow…

  • Unscored —
    CVE-2008-4815 EPSS 29%

    Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to…

  • Unscored —
    CVE-2008-4817 EPSS 11%

    The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbi…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=450078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469875
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469923
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0974.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2549
  • report
    https://access.redhat.com/security/cve/CVE-2008-2992
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2992
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2992
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2008-4812
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4812
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4812
  • report
    https://access.redhat.com/security/cve/CVE-2008-4813
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4813
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4813
  • report
    https://access.redhat.com/security/cve/CVE-2008-4814
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4814
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4814
  • report
    https://access.redhat.com/security/cve/CVE-2008-4815
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4815
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4815
  • report
    https://access.redhat.com/security/cve/CVE-2008-4817
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4817
  • report
    https://access.redhat.com/security/cve/CVE-2009-0927
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618340
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0927
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0927