critical9.3Public exploit code
CVE-2009-2990
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe - U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (1)2010-09-20 · remote · multiple · Verified
- Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow2009-11-09 · local · multiple · Verified
Impact
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | through 9.1.3 Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4 |
| Adobe | Acrobat Reader | through 9.1.3 Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1023007
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- http://www.securityfocus.com/bid/36638
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html
- http://www.vupen.com/english/advisories/2009/2898
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371
- http://securitytracker.com/id?1023007
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- http://www.securityfocus.com/bid/36638
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html
- http://www.vupen.com/english/advisories/2009/2898
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371