Vulnerability in Adobe Acrobat
CVE-2009-2990
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
EPSS: 0.687 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 7.0, 7.0.1, 7.0.2
- Adobe Acrobat_reader — versions 7.0, 7.0.1, 7.0.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
- cve@mitre.org (US Government Resource, Patch, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2009-2990?
- CVE-2009-2990 is a vulnerability in Adobe Acrobat, classified under CWE-189. Published 2009-10-19.
- Is CVE-2009-2990 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.