CVE-2008-4817: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days.

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

Affected products

• Adobe Acrobat: up to and including 8.1.2; version 8.1.1 only
• Adobe Acrobat Reader: up to and including 8.0

Published 2008-11-05. Last modified 2026-06-16.