CVE-2007-5659
Adobe Acrobat and Reader Buffer Overflow Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2007-5659
Description
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitation Context
as of October 17, 2026- CISA added CVE-2007-5659 to the KEV catalog 5,230 days after its CVE record was published.
- It is one of 82 Adobe entries in the CISA KEV catalog, and one of 54 added in 2022.
- Its current EPSS score (87.4%) is higher than that of 70% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| - | - | n/a |
References
13 LinksRecord Details
More from Adobe
Adobe Reader and Acrobat Input Validation Vulnerability
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.