CVE-2007-5659VulnerabilityPublished 06/08/2022Updated 10/24/2026

CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability

Affects Adobe Acrobat and ReaderSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 06/08/2022
KEV deadline: 06/22/2022
EPSS: 87.4% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2007-5659 (opens in a new tab)

Description

Adobe Acrobat and Reader have a buffer overflow vulnerability that can be triggered by a specially crafted PDF file containing long arguments to certain JavaScript methods. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

CVE-2007-5659 describes a buffer overflow vulnerability in Adobe Acrobat and Reader. The issue arises when processing PDF files that include long arguments passed to unspecified JavaScript methods, leading to potential remote code execution. The vulnerability is known to have been exploited in the wild, indicating active threat usage. No vendor advisory or patch details are included in the provided information.

Impact

Successful exploitation enables remote attackers to execute arbitrary code on the victim's system via malicious PDF files. This can lead to full compromise of the affected system. The vulnerability has been observed in active exploitation campaigns.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, users should exercise caution when opening PDF files from untrusted sources and consider disabling JavaScript execution within Acrobat and Reader if possible.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:51:20 UTC

Weaknesses

References

Related threats