CVE-2007-5659
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Adobe Acrobat and Reader Buffer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 87% (percentile: 100) as of 1 November 2026
- CWE
- CWE-120
Affected products
adobe: acrobat; adobe: acrobat reader
References
- http://www.adobe.com/support/security/advisories/apsa08-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb08-13.html Vendor Advisory
- http://www.adobe.com/support/security/advisories/apsa08-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb08-13.html Vendor Advisory
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657 Broken Link
- http://secunia.com/advisories/29065 Broken Link
- http://secunia.com/advisories/29205 Broken Link
- http://secunia.com/advisories/30840 Broken Link
- http://security.gentoo.org/glsa/glsa-200803-01.xml Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 Broken Link