CVE-2008-4071: Adobe Acrobat

Medium severity, CVSS 5.0. EPSS: 18.4% chance of exploitation in the next 30 days.

A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.

Affected products

• Adobe Acrobat: version 9 only

Published 2008-09-15. Last modified 2026-06-16.