« Volver al listado

CVE-2008-5331

Estado: ModificadaAlta (7.5)—

Adobe Acrobat v9 utiliza un cifrado mas eficiente que en anteriores versiones, lo que permite a atacantes averiguar la contraseña de un documento mas fácilmente a través de un ataque de fuerza bruta.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Acrobat

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-5331",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-12-05T00:30:00.440",
  "references": [
    {
      "url": "http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.elcomsoft.com/PR/apdfpr_081126_en.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32610",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.elcomsoft.com/PR/apdfpr_081126_en.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32610",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack."
    },
    {
      "lang": "es",
      "value": "Adobe Acrobat v9 utiliza un cifrado mas eficiente que en anteriores versiones, lo que permite a atacantes averiguar la contraseña de un documento mas fácilmente a través de un ataque de fuerza bruta."
    }
  ],
  "lastModified": "2026-06-16T22:59:44.013",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:professional:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72CF5F4B-C1D4-4117-A379-14F38B4CAEFD"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}