CVE-2009-2986 Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
HighCVSS 9.3
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 9.1.3 | No fix listed |
| Adobe acrobat | = 7.0 | No fix listed |
| Adobe acrobat | = 7.0.1 | No fix listed |
| Adobe acrobat | = 7.0.2 | No fix listed |
| Adobe acrobat | = 7.0.3 | No fix listed |
| Adobe acrobat | = 7.0.4 | No fix listed |
| Adobe acrobat | = 7.0.5 | No fix listed |
| Adobe acrobat | = 7.0.6 | No fix listed |
| Adobe acrobat | = 7.0.7 | No fix listed |
| Adobe acrobat | = 7.0.8 | No fix listed |
| Adobe acrobat | = 7.0.9 | No fix listed |
| Adobe acrobat | = 7.1.0 | No fix listed |
| Adobe acrobat | = 7.1.1 | No fix listed |
| Adobe acrobat | = 7.1.3 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 8.1.6 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | <= 9.1.3 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 7.0 | No fix listed |
| Adobe Acrobat Reader | = 7.0.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0.2 | No fix listed |
| Adobe Acrobat Reader | = 7.0.3 | No fix listed |
| Adobe Acrobat Reader | = 7.0.4 | No fix listed |
| Adobe Acrobat Reader | = 7.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0.6 | No fix listed |
| Adobe Acrobat Reader | = 7.0.7 | No fix listed |
| Adobe Acrobat Reader | = 7.0.8 | No fix listed |
| Adobe Acrobat Reader | = 7.0.9 | No fix listed |
| Adobe Acrobat Reader | = 7.1.0 | No fix listed |
| Adobe Acrobat Reader | = 7.1.1 | No fix listed |
| Adobe Acrobat Reader | = 7.1.3 | No fix listed |
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.3 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 8.1.6 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
References
- 1023007 vdb-entry
- www.adobe.com patch vendor-advisory
- 36638 vdb-entry
- TA09-286B patch third-party-advisory us-government-resource
- ADV-2009-2898 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:5888 signature vdb-entry