CVEvulnerability
CVE-2009-2990
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe acrobat (<= 9.1.3)
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.3
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.6
• adobe acrobat 9.0
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat reader (<= 9.1.3)
• adobe acrobat reader 7.0
• adobe acrobat reader 7.0.1
• adobe acrobat reader 7.0.2
• adobe acrobat reader 7.0.3
• adobe acrobat reader 7.0.4
• adobe acrobat reader 7.0.5
• adobe acrobat reader 7.0.6
• adobe acrobat reader 7.0.7
• adobe acrobat reader 7.0.8
• adobe acrobat reader 7.0.9
• adobe acrobat reader 7.1.0
• adobe acrobat reader 7.1.1
• adobe acrobat reader 7.1.3
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.3
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
Related
Weakness · not in database (1)
References
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371 oval.cisecurity.org
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371 oval.cisecurity.org