CVE-2009-2998
NoneCVSS
—
EPSS
10.4%
Published
Oct 19, 2009
CISA due date
—
The record
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | acroread | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:3 | acroread-plugin | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:8.1.7-1.el5 |
Related vulnerabilities
- CVE-2009-2994 Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x… Also affects acroread
- CVE-2009-2983 Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4… Also affects acroread
- CVE-2009-2990 Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and… Also affects acroread
- CVE-2009-3458 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3459 Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before… Also affects acroread
- CVE-2009-3431 Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and… Also affects acroread
- CVE-2009-1855 Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8… Also affects acroread
- CVE-2009-0511 Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before… Also affects acroread