CVE-2009-2980
Advisory lineage Upstream: 0 Downstream: 1
Downstream
Modified
Published: 19 Oct 2009, 22:00
Last modified:07 Aug 2024, 06:07
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
9.3 HIGH
v2.0 (nvd)
EPSS Score
47.81% HIGH
48% probability -0.94%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
19 Oct 2009, 22:00
Published
Vulnerability first disclosed
07 Aug 2024, 06:07
Last Modified
Vulnerability information updated
Description
Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
CVSS Metrics
- v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Trends
Current EPSS score: 47.81%• Percentile: 98%
Techniques & Countermeasures
- CWE-189•Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
Affected Systems
- adobe•acrobat
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.6 | 9.0 | 9.1.1 | 9.1.2
- adobe•acrobat_reader
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.5 | 8.1.6 | 9.0 | 9.1 | 9.1.1 | 9.1.2
References (6)
- http://www.securityfocus.com/bid/36638
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html
- http://securitytracker.com/id?1023007
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- http://www.vupen.com/english/advisories/2009/2898