CVE-2009-1855

high · 9.3

Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.

9.3

CVSS

12.4%

EPSS (exploit prob.)

96th

EPSS percentile

2009-06-11

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
adobe	acrobat	7.0
adobe	acrobat	7.0
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.1
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.2
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.3
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.4
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.5
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.6
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.7
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.9
adobe	acrobat	7.0.9
adobe	acrobat	7.1
adobe	acrobat	7.1
adobe	acrobat	7.1
adobe	acrobat	7.1.0
adobe	acrobat	7.1.1
adobe	acrobat	7.1.1
adobe	acrobat	8.0
adobe	acrobat	8.0
adobe	acrobat	8.0
adobe	acrobat	8.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1855