CVEvulnerability
CVE-2009-2994
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe acrobat (<= 9.1.3)
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.3
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.6
• adobe acrobat 9.0
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat reader (<= 9.1.3)
• adobe acrobat reader 7.0
• adobe acrobat reader 7.0.1
• adobe acrobat reader 7.0.2
• adobe acrobat reader 7.0.3
• adobe acrobat reader 7.0.4
• adobe acrobat reader 7.0.5
• adobe acrobat reader 7.0.6
• adobe acrobat reader 7.0.7
• adobe acrobat reader 7.0.8
• adobe acrobat reader 7.0.9
• adobe acrobat reader 7.1.0
• adobe acrobat reader 7.1.1
• adobe acrobat reader 7.1.3
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.3
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156 oval.cisecurity.org
- http://securitytracker.com/id?1023007 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb09-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36638 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2009/2898 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156 oval.cisecurity.org