CVE-2008-4815: High severity unix vulnerability
Adobe Reader was built to use insecure RPATH in the binary.
This issue could possibly be exploited by a local attacker to run arbitrary code as some other user if victim user can be convinced to run Adobe Reader in an attacker controlled directory with specially crafted content.
Other sources
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4815?
CVE-2008-4815 is considered a critical vulnerability as it could allow local attackers to execute arbitrary code.
How do I fix CVE-2008-4815?
To fix CVE-2008-4815, you should update Adobe Reader to a version later than 8.1.2.
Who is affected by CVE-2008-4815?
CVE-2008-4815 affects users of Adobe Acrobat Reader versions up to and including 8.1.2.
What kind of attacks can be executed due to CVE-2008-4815?
CVE-2008-4815 can be exploited for local code execution if the user runs Adobe Reader in a maliciously controlled environment.
When was CVE-2008-4815 reported?
CVE-2008-4815 was reported in 2008, highlighting the risks associated with using insecure RPATH in the binary.