Description
Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 8.1.2-1.el5.3 | RHSA-2008:0144 |
| RHEL 4 | acroread +1 | 8.1.2-1.el4.2 | RHSA-2008:0144 |
| RHEL 3 | acroread +1 | 8.1.2-1.el3.6 | RHSA-2008:0144 |
Advisories 1
- RHSA-2008:0144 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- SUSE-SA:2008:009 vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- ADV-2008-1966 vdb-entry
- http://www.adobe.com/support/security/advisories/apsa08-01.html
- 28983 third-party-advisory
- 239286 vendor-advisory
- 20080211 ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability mailing-list
- GLSA-200803-01 vendor-advisory
- 29065 third-party-advisory
- 30840 third-party-advisory
- 29205 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-004.html
- oval:org.mitre.oval:def:10957 vdb-entry signature
- RHSA-2008:0144 vendor-advisory