CVE-2008-0994: Infoleak
Published Mar 18, 2008
·Updated
Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods.
Affected Software
2 affected components
Apple Mac OS X Server=10.5.2
Apple iOS and macOS=10.5.2
Remediation
Event History
Mar 18, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0994?
CVE-2008-0994 is classified as a moderate severity vulnerability due to its potential for exploitation through brute force attacks.
2
How do I fix CVE-2008-0994?
To fix CVE-2008-0994, update your Apple Mac OS X to a version that addresses this vulnerability.
3
What types of files are affected by CVE-2008-0994?
CVE-2008-0994 affects PDF files saved with encryption using 40-bit RC4 on affected versions of Apple Mac OS X.
4
Who is at risk for CVE-2008-0994?
Users of Apple Mac OS X 10.5.2 who encrypt PDF files are at risk for CVE-2008-0994.
5
What does CVE-2008-0994 allow an attacker to do?
CVE-2008-0994 allows an attacker to decrypt PDF files via brute force methods due to weak encryption.