CVE-2009-2981

Advisory lineage Upstream: 0 Downstream: 1

Downstream

RHSA-2009:1499

Modified

Published: 19 Oct 2009, 22:00

Last modified:07 Aug 2024, 06:07

Vulnerability Summary

Overall Risk (default)

high

70/100

CVSS Score

9.3 HIGH

v2.0 (nvd)

EPSS Score

6.96% LOW

7% probability -0.28%

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

19 Oct 2009, 22:00

Published

Vulnerability first disclosed

07 Aug 2024, 06:07

Last Modified

Vulnerability information updated

Description

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.

CVSS Metrics

v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 6.96%• Percentile: 92%

Techniques & Countermeasures

CWE-20•Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected Systems

adobe•acrobat
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.6 | 9.0 | 9.1.1 | 9.1.2
adobe•acrobat_reader
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.5 | 8.1.6 | 9.0 | 9.1 | 9.1.1 | 9.1.2