CVE-2009-1856

high · 9.3

Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.

9.3

CVSS

13.9%

EPSS (exploit prob.)

96th

EPSS percentile

2009-06-11

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

Vendor	Product	Affected versions
adobe	acrobat	7.0
adobe	acrobat	7.0
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.1
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.2
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.3
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.4
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.5
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.6
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.7
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat	7.0.9
adobe	acrobat	7.0.9
adobe	acrobat	7.1
adobe	acrobat	7.1
adobe	acrobat	7.1
adobe	acrobat	7.1.0
adobe	acrobat	7.1.1
adobe	acrobat	7.1.1
adobe	acrobat	8.0
adobe	acrobat	8.0
adobe	acrobat	8.0
adobe	acrobat	8.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1856