CVE-2008-2992

This is a flaw in older versions of Adobe Acrobat and Adobe Reader that can be triggered by a malicious PDF. If a user opens the PDF, the PDF can take advantage of an overflow bug and run malicious code on the computer—like putting a booby-trap inside a document attachment.

This matters if you use Adobe Acrobat or Adobe Reader on computers where users might open PDF files from email, the web, or shared documents. It’s especially relevant because CISA’s KEV catalog indicates it has been used in ransomware activity.

Action is required when the vulnerable Adobe Reader/Acrobat version (8.1.2 and earlier) is present; the risk depends on whether attackers can reach your users through a convincing PDF.

This is RED because it is confirmed in CISA’s KEV set and has been used in ransomware campaigns. Attackers have also published working exploits, meaning this is not just a theoretical risk.