CVE-2008-4071
Adobe Acrobat - Improper Input Validation
Title source: ruleDescription
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Jeremy Brown · htmldoswindows
https://www.exploit-db.com/exploits/6424
Scores
EPSS
0.0606
EPSS Percentile
90.8%
Details
CWE
CWE-20
Status
published
Products (1)
adobe/acrobat
9
Published
Sep 15, 2008
Tracked Since
Feb 18, 2026