CVE-2008-4813: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 9.5% chance of exploitation in the next 30 days.

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.

Affected products

• Adobe Acrobat: up to and including 8.1.2; version 8.1.1 only
• Adobe Acrobat Reader: up to and including 8.0

Published 2008-11-05. Last modified 2026-06-16.