{"cvss":0.0,"datePublished":"2010-01-20T00:00:00Z","dateUpdated":"2010-01-20T00:00:00Z","description":"The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.","dueDate":"","id":"CVE-2008-2042","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Acrobat and Reader","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Adobe Acrobat and Reader Improper Input Validation","vendor":"Adobe"}