CVE-2009-2985

Advisory lineage Upstream: 0 Downstream: 1

Downstream

RHSA-2009:1499

Modified

Published: 19 Oct 2009, 22:00

Last modified:07 Aug 2024, 06:07

Vulnerability Summary

Overall Risk (default)

high

70/100

CVSS Score

9.3 HIGH

v2.0 (nvd)

EPSS Score

19.34% MEDIUM

19% probability -0.65%

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

19 Oct 2009, 22:00

Published

Vulnerability first disclosed

07 Aug 2024, 06:07

Last Modified

Vulnerability information updated

Description

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996.

CVSS Metrics

v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 19.34%• Percentile: 95%

Techniques & Countermeasures

CWE-399•Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Affected Systems

adobe•acrobat
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.6 | 9.0 | 9.1.1 | 9.1.2
adobe•acrobat_reader
≤ 9.1.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.1.0 | 7.1.1 | 7.1.3 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.5 | 8.1.6 | 9.0 | 9.1 | 9.1.1 | 9.1.2