CVE-2008-2042

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.

• adobe acrobat (<= 8.1.1) • adobe acrobat 3.0 • adobe acrobat 3.1 • adobe acrobat 4.0 • adobe acrobat 4.0.5 • adobe acrobat 4.0.5a • adobe acrobat 4.0.5c • adobe acrobat 5.0 • adobe acrobat 5.0.5 • adobe acrobat 5.0.6 • adobe acrobat 5.0.10 • adobe acrobat 6.0 • adobe acrobat 6.0.1 • adobe acrobat 6.0.2 • adobe acrobat 6.0.3 • adobe acrobat 6.0.4 • adobe acrobat 6.0.5 • adobe acrobat 6.0.6 • adobe acrobat 7.0 • adobe acrobat 7.0.1 • adobe acrobat 7.0.2 • adobe acrobat 7.0.3 • adobe acrobat 7.0.4 • adobe acrobat 7.0.5 • adobe acrobat 7.0.6 • adobe acrobat 7.0.7 • adobe acrobat 7.0.8 • adobe acrobat 7.0.9 • adobe acrobat 7.1.0 • adobe acrobat 7.1.1 • adobe acrobat 7.1.2 • adobe acrobat 7.1.3 • adobe acrobat 7.1.4 • adobe acrobat 8.0 • adobe acrobat 8.1 • adobe acrobat reader (<= 8.1.1) • adobe acrobat reader 3.0 • adobe acrobat reader 3.01 • adobe acrobat reader 3.02 • adobe acrobat reader 4.0 • adobe acrobat reader 4.0.5 • adobe acrobat reader 4.0.5a • adobe acrobat reader 4.0.5c • adobe acrobat reader 4.5 • adobe acrobat reader 5.0 • adobe acrobat reader 5.0.5 • adobe acrobat reader 5.0.6 • adobe acrobat reader 5.0.7 • adobe acrobat reader 5.0.9 • adobe acrobat reader 5.0.10 • adobe acrobat reader 5.0.11 • adobe acrobat reader 5.1 • adobe acrobat reader 6.0 • adobe acrobat reader 6.0.1 • adobe acrobat reader 6.0.2 • adobe acrobat reader 6.0.3 • adobe acrobat reader 6.0.4 • adobe acrobat reader 6.0.5 • adobe acrobat reader 6.0.6 • adobe acrobat reader 7.0 … and 16 more