Description
Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 8.1.3-1.el5 | RHSA-2008:0974 |
| RHEL 4 | acroread +1 | 8.1.3-1.el4 | RHSA-2008:0974 |
| RHEL 3 | acroread +1 | 8.1.3-1 | RHSA-2008:0974 |
Advisories 1
- RHSA-2008:0974 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 20081104 ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability mailing-list
- 32700 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb09-04.html
- http://www.zerodayinitiative.com/advisories/ZDI-08-073/
- 32100 vdb-entry
- adobe-acrobatreader-collab-code-execution(46344) vdb-entry
- 249366 vendor-advisory
- 20081104 ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability mailing-list
- 32872 third-party-advisory
- 4564 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-074/
- http://www.adobe.com/support/security/bulletins/apsb08-19.html
- ADV-2009-0098 vdb-entry
- TA08-309A third-party-advisory
- 1021140 vdb-entry
- ADV-2008-3001 vdb-entry
- SUSE-SR:2008:026 vendor-advisory
- adobe-acrobatreader-object-code-execution(46333) vdb-entry
- RHSA-2008:0974 vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801