VULNERABILITY INTELLIGENCE
CVE-2008-4812
CVSS score9.3 HIGH
EPSS probability8.80%
CISA KEVNot currently listed
Published2008-11-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.
Weakness classification
- CWE-20: Improper Input Validation