EXPOSURES › CVE-2008-2992
CVE-2008-2992
CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 95/100
ransomwarerceexploited-in-wild
A critical, actively exploited vulnerability in Adobe Acrobat and Reader allows for potential remote code execution.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
CVE-2008-2992 is a remote code execution vulnerability in Adobe Acrobat/Reader, but the provided sources lack specific press or authority commentary on the vendor's response, relying instead on techni
Technical description of a severe RCE vulnerability without commentary on vendor response.
"Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution."
Mentions multiple Adobe vulnerabilities including arbitrary code execution but lacks specific commentary on CVE-2008-2992 or vendor response.
"Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution."
CISA KEV catalog implies active exploitation but provides no commentary on vendor response or press reception.
"CISA's Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."
No relevant security commentary; source is a vendor risk platform homepage.
Irrelevant source; no security commentary.
AFFECTED FEDRAMP PRODUCTS · 8
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |