CVE-2009-2989

Опубликовано: 19 окт. 2009

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.

Ссылки

http://securitytracker.com/id?1023007
http://www.adobe.com/support/security/bulletins/apsb09-15.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36638
http://www.us-cert.gov/cas/techalerts/TA09-286B.html
Patch
US Government Resource
http://www.vupen.com/english/advisories/2009/2898
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297
http://securitytracker.com/id?1023007
http://www.adobe.com/support/security/bulletins/apsb09-15.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36638
http://www.us-cert.gov/cas/techalerts/TA09-286B.html
Patch
US Government Resource
http://www.vupen.com/english/advisories/2009/2898
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

Версия до 9.1.3 (включая)

cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.51724

Средний

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2009-2989

ubuntu

больше 16 лет назад

Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.

GHSA-5qhm-mrwg-x22r

github

почти 4 года назад

Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.

EPSS

Процентиль: 98%

0.51724

Средний

9.3 Critical

CVSS2

Дефекты

CWE-189