CVE:CVE-2008-2992
CNNVD:CNNVD-200811-019
Adobe Reader是非常流行的PDF文件阅读和编辑器。
Adobe Reader在解析特制的PDF文件时存在栈溢出漏洞。如果格式字符串在util.printf() JavaScript函数中包含有浮点标识符的话，就可能触发这个溢出，导致执行任意指令。
solution:Upgrade adobe acrobat to a higher version than 8.1.2,3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,and avoid the version (,8.1.2],3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1; Upgrade adobe acrobat_reader to a higher version than 8.1.2,3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,and avoid the version (,8.1.2],3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1