CVE-2008-0883
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a...
CVE-2008-0883 is a low vulnerability (CVSS 3.7) in Adobe Acrobat Reader, published March 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 56th percentile. No source names a fixed version.
- Severity
- 3.7 LowCVSS 2.0, NVD
- Exploit chance
- 0.77%EPSS, 56th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acroreadRed Hat:rhel_extras:3 From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2 | 0:8.1.2.SU1-2 |
acroread-pluginRed Hat:rhel_extras:3 From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2 | 0:8.1.2.SU1-2 |
acroreadRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el4 | 0:8.1.2.SU1-2.el4 |
acroread-pluginRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el4 | 0:8.1.2.SU1-2.el4 |
acroreadRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el5 | 0:8.1.2.SU1-2.el5 |
acroread-pluginRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el5 | 0:8.1.2.SU1-2.el5 |
acroreadRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el5 | 0:8.1.2.SU1-2.el5 |
acroread-pluginRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 0:8.1.2.SU1-2.el5 | 0:8.1.2.SU1-2.el5 |
What each source reports
NVD Score used 3.7
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
- Record
CVE-2008-0883- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
- Record
CVE-2008-0883- Updated
- 2026-11-02
EUVDEUVD-2008-0890No score
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
- Record
EUVD-2008-0890- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-whm3-pjww-fw7wNo score
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a...
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
- Record
GHSA-whm3-pjww-fw7w- Weakness
- CWE-59
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2008/2289
securityfocus.com/bid/28091
secunia.com/advisories/29242
gentoo.org/security/en/glsa/glsa-200803-26.xml
lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
secunia.com/advisories/29425
Show 22 moreShow less
secunia.com/advisories/31352
secunia.com/advisories/29229
sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1
adobe.com/support/security/advisories/apsa08-02.html
exchange.xforce.ibmcloud.com/vulnerabilities/40987
redhat.com/support/errata/RHSA-2008-0641.html
securitytracker.com/id?1019539
support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html
secunia.com/advisories/31136
vupen.com/english/advisories/2008/0765/references
nvd.nist.gov/vuln/detail/CVE-2008-0883
github.com/advisories/GHSA-whm3-pjww-fw7w
access.redhat.com/errata/RHSA-2008:0641
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=436263
bugzilla.redhat.com/show_bug.cgi?id=452632
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0641.json
access.redhat.com/security/cve/CVE-2008-0883
cve.org/CVERecord?id=CVE-2008-0883
access.redhat.com/security/cve/CVE-2008-2641
cve.org/CVERecord?id=CVE-2008-2641
nvd.nist.gov/vuln/detail/CVE-2008-2641