CVE-2008-0667
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8...
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.
Exploit likelihood
What each source reports
NVD Score used
4.3
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.
- Record
CVE-2008-0667- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.
- Record
CVE-2008-0667- Updated
- 2026-11-02
EUVDEUVD-2008-0677 No score
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.
- Record
EUVD-2008-0677- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5pf-wcfw-339x No score
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8...
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.
- Record
GHSA-r5pf-wcfw-339x- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acroreadRed Hat:rhel_extras:3 From an advisory covering 7 CVEs |
before 0:8.1.2-1.el3.6 | 0:8.1.2-1.el3.6 |
acroread-pluginRed Hat:rhel_extras:3 From an advisory covering 7 CVEs |
before 0:8.1.2-1.el3.6 | 0:8.1.2-1.el3.6 |
acroreadRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:8.1.2-1.el4.2 | 0:8.1.2-1.el4.2 |
acroread-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:8.1.2-1.el4.2 | 0:8.1.2-1.el4.2 |
acroreadRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:8.1.2-1.el5.3 | 0:8.1.2-1.el5.3 |
acroread-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:8.1.2-1.el5.3 | 0:8.1.2-1.el5.3 |
acroreadRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:8.1.2-1.el5.3 | 0:8.1.2-1.el5.3 |
acroread-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:8.1.2-1.el5.3 | 0:8.1.2-1.el5.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0667 is a medium vulnerability (CVSS 4.3) in Adobe Acrobat Reader, published February 11, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.91%, the 94th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
securityreason.com/securityalert/3625
kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
us-cert.gov/cas/techalerts/TA08-043A.html
adobe.com/support/security/bulletins/apsb08-13.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9731
Show 48 moreShow less
vupen.com/english/advisories/2008/1966/references
secunia.com/advisories/28851
adobe.com/support/security/advisories/apsa08-01.html
secunia.com/advisories/28983
sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
security.gentoo.org/glsa/glsa-200803-01.xml
vupen.com/english/advisories/2008/0425/references
secunia.com/advisories/29065
secunia.com/advisories/30840
secunia.com/advisories/29205
securityfocus.com/bid/27641
fortiguardcenter.com/advisory/FGA-2008-04.html
secunia.com/advisories/28802
redhat.com/support/errata/RHSA-2008-0144.html
securityfocus.com/archive/1/487760/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2008-0667
github.com/advisories/GHSA-r5pf-wcfw-339x
access.redhat.com/errata/RHSA-2008:0144
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=223113
bugzilla.redhat.com/show_bug.cgi?id=431985
bugzilla.redhat.com/show_bug.cgi?id=432471
bugzilla.redhat.com/show_bug.cgi?id=432629
bugzilla.redhat.com/show_bug.cgi?id=432630
bugzilla.redhat.com/show_bug.cgi?id=432632
bugzilla.redhat.com/show_bug.cgi?id=432757
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0144.json
access.redhat.com/security/cve/CVE-2007-0044
cve.org/CVERecord?id=CVE-2007-0044
nvd.nist.gov/vuln/detail/CVE-2007-0044
access.redhat.com/security/cve/CVE-2007-5659
cve.org/CVERecord?id=CVE-2007-5659
nvd.nist.gov/vuln/detail/CVE-2007-5659
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2007-5663
cve.org/CVERecord?id=CVE-2007-5663
nvd.nist.gov/vuln/detail/CVE-2007-5663
access.redhat.com/security/cve/CVE-2007-5666
cve.org/CVERecord?id=CVE-2007-5666
nvd.nist.gov/vuln/detail/CVE-2007-5666
access.redhat.com/security/cve/CVE-2008-0655
cve.org/CVERecord?id=CVE-2008-0655
nvd.nist.gov/vuln/detail/CVE-2008-0655
access.redhat.com/security/cve/CVE-2008-0667
cve.org/CVERecord?id=CVE-2008-0667
access.redhat.com/security/cve/CVE-2008-0726
cve.org/CVERecord?id=CVE-2008-0726
nvd.nist.gov/vuln/detail/CVE-2008-0726