CVEvulnerability
CVE-2009-2981
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.
Affected configurations
• adobe acrobat (<= 9.1.3)
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.3
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.6
• adobe acrobat 9.0
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat reader (<= 9.1.3)
• adobe acrobat reader 7.0
• adobe acrobat reader 7.0.1
• adobe acrobat reader 7.0.2
• adobe acrobat reader 7.0.3
• adobe acrobat reader 7.0.4
• adobe acrobat reader 7.0.5
• adobe acrobat reader 7.0.6
• adobe acrobat reader 7.0.7
• adobe acrobat reader 7.0.8
• adobe acrobat reader 7.0.9
• adobe acrobat reader 7.1.0
• adobe acrobat reader 7.1.1
• adobe acrobat reader 7.1.3
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.3
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284 oval.cisecurity.org
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284 oval.cisecurity.org