CVE-2009-2990
NoneCVSS
—
EPSS
68.6%
Published
Oct 19, 2009
CISA due date
—
The record
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | acroread | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:3 | acroread-plugin | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:8.1.7-1.el5 |
Related vulnerabilities
- CVE-2009-2994 Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x… Also affects acroread
- CVE-2009-2983 Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4… Also affects acroread
- CVE-2009-2998 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3458 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3459 Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before… Also affects acroread
- CVE-2009-3431 Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and… Also affects acroread
- CVE-2009-1855 Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8… Also affects acroread
- CVE-2009-0511 Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before… Also affects acroread