Exploit / PoCcriticalExploited in the wild

The Acrobat JavaScript Blocklist Framework

Cisco TalosJan 20, 2010 · 17:56 UTC (Jan 20, 2010)3 min read3

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2008-2992 CVE-2009-0927 CVE-2009-1493 CVE-2009-2990 CVE-2009-1492 CVE-2009-4324 CVE-2008-2042 CVE-2007-5659

Tags: cve-2008-2992 cve-2009-0927 cve-2009-1493 cve-2009-2990 cve-2009-1492 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2007-5659	Buffer Overflow in Adobe Acrobat and Reader via Malicious PDF JavaScript	—	87%	KEV	— KEV Jun 8, 2022
CVE-2008-2992	Adobe Acrobat and Reader JavaScript Input Validation Flaw Enables Remote Code Execution	—	100%	KEVRansomware	— KEV Mar 3, 2022
CVE-2009-0927	Stack-Based Buffer Overflow in Adobe Reader and Acrobat Enables Remote Code Execution	—	97%	KEV	— KEV Mar 25, 2022
CVE-2009-4324	Use-After-Free RCE in Adobe Acrobat and Reader via Crafted PDF Files	—	82%	KEV	— KEV Jun 8, 2022

From the original article

3 min read at blog.talosintelligence.com

Adobe recently announced and released the Adobe Reader and Acrobat JavaScript Blocklist Framework. I've had a little bit of time to play with it and would just like to share my thoughts. First of all, I am very pleased with this new blocklisting feature.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.