CVE-2008-4812: Input Validation
Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4812?
CVE-2008-4812 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2008-4812?
To fix CVE-2008-4812, update Adobe Reader and Acrobat to the latest version that resolves this vulnerability.
What types of systems are affected by CVE-2008-4812?
CVE-2008-4812 affects Adobe Acrobat Reader versions 8.1.2 and earlier, including all 8.1.1 variants.
What could an attacker do by exploiting CVE-2008-4812?
An attacker exploiting CVE-2008-4812 could execute arbitrary code on the vulnerable system through a crafted PDF document.
When was CVE-2008-4812 disclosed?
CVE-2008-4812 was disclosed in November 2008, highlighting significant security risks associated with Adobe Reader and Acrobat.