CVE-2009-2979

Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2009:1499
Modified
Published: 19 Oct 2009, 22:00
Last modified:07 Aug 2024, 06:07

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.3 MEDIUM
v2.0 (nvd)
EPSS Score
1.97% LOW
2% probability +0.18%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Oct 2009, 22:00
Published
Vulnerability first disclosed
07 Aug 2024, 06:07
Last Modified
Vulnerability information updated

Description

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 1.97%• Percentile: 84%

Affected Systems

  • adobe•acrobat

    ≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.6 | 9.0 | 9.1.1 | 9.1.2

  • adobe•acrobat_reader

    ≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.5 | 8.1.6 | 9.0 | 9.1 | 9.1.1 | 9.1.2

References (6)