CVE-2007-5659

adobe acrobat, adobe acrobat reader

Published 12 Feb 2008 · updated 16 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Jun 2022, with a remediation deadline of 22 Jun 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=657 · Broken Link
secunia.com/advisories/29065 · Broken Link
secunia.com/advisories/29205 · Broken Link
secunia.com/advisories/30840 · Broken Link
security.gentoo.org/glsa/glsa-200803-01.xml · Third Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 · Broken Link
www.adobe.com/support/security/advisories/apsa08-01.html · Vendor Advisory
www.adobe.com/support/security/bulletins/apsb08-13.html · Vendor Advisory
www.kb.cert.org/vuls/id/666281 · Third Party Advisory, US Government Resource
www.redhat.com/support/errata/RHSA-2008-0144.html · Broken Link
www.us-cert.gov/cas/techalerts/TA08-043A.html · Broken Link, Third Party Advisory, US Government Resource
www.vupen.com/english/advisories/2008/1966/references · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9813 · Broken Link
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-5659 · US Government Resource