CVE-2008-2549: Medium severity adobe acrobat reader notification manager vulnerability

Q: What is the severity of CVE-2008-2549?

CVE-2008-2549 is classified as a medium severity vulnerability due to its potential to cause a denial of service and possibly allow arbitrary code execution.

Q: How do I fix CVE-2008-2549?

To fix CVE-2008-2549, update Adobe Acrobat Reader to the latest version as specified by Adobe's security bulletins.

Q: Which versions of Adobe Acrobat Reader are affected by CVE-2008-2549?

CVE-2008-2549 affects Adobe Acrobat Reader versions 8.1.2 and earlier, along with versions prior to 7.1.1.

Q: What type of attack does CVE-2008-2549 exploit?

CVE-2008-2549 exploits vulnerabilities in Adobe Acrobat Reader that allows remote attackers to cause application crashes or execute arbitrary code via malformed PDF documents.

Q: Is there a workaround for CVE-2008-2549 if I cannot update immediately?

While the best mitigation for CVE-2008-2549 is to update, avoiding opening untrusted or suspicious PDF files can act as a temporary workaround.

Published Jun 4, 2008

Updated

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.

Affected Software

32 affected components

Adobe Acrobat reader<=8.1.2

Adobe Acrobat reader=3.0

Adobe Acrobat reader=4.0

Adobe Acrobat reader=4.0.5

Adobe Acrobat reader=4.5

Adobe Acrobat reader=5.0

Adobe Acrobat reader=5.0.5

Adobe Acrobat reader=5.0.6

Adobe Acrobat reader=5.0.7

Adobe Acrobat reader=5.0.9

Adobe Acrobat reader=5.0.10

Adobe Acrobat reader=5.0.11

Adobe Acrobat reader=5.1

Adobe Acrobat reader=6.0

Adobe Acrobat reader=6.0.1

Adobe Acrobat reader=6.0.2

Adobe Acrobat reader=6.0.3

Adobe Acrobat reader=6.0.4

Adobe Acrobat reader=6.0.5

Adobe Acrobat reader=7.0

Adobe Acrobat reader=7.0.1

Adobe Acrobat reader=7.0.2

Adobe Acrobat reader=7.0.3

Adobe Acrobat reader=7.0.4

Adobe Acrobat reader=7.0.5

Adobe Acrobat reader=7.0.6

Adobe Acrobat reader=7.0.7

Adobe Acrobat reader=7.0.8

Adobe Acrobat reader=7.0.9

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Event History

Jun 4, 2008

CVE Published

via MITRE·07:17 PM

Data Sourced

via MITRE·07:17 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2549?

CVE-2008-2549 is classified as a medium severity vulnerability due to its potential to cause a denial of service and possibly allow arbitrary code execution.

How do I fix CVE-2008-2549?

To fix CVE-2008-2549, update Adobe Acrobat Reader to the latest version as specified by Adobe's security bulletins.

Which versions of Adobe Acrobat Reader are affected by CVE-2008-2549?