CVE-2009-2998

high · 9.3

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458.

9.3

CVSS

10.5%

EPSS (exploit prob.)

96th

EPSS percentile

2009-10-19

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.9
adobe	acrobat	7.1.0
adobe	acrobat	7.1.1
adobe	acrobat	7.1.3
adobe	acrobat	8.0
adobe	acrobat	8.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.2
adobe	acrobat	8.1.3
adobe	acrobat	8.1.4
adobe	acrobat	8.1.6
adobe	acrobat	9.0
adobe	acrobat	9.1.1
adobe	acrobat	9.1.2
adobe	acrobat	9.1.3
adobe	acrobat_reader	<= 9.1.3
adobe	acrobat_reader	7.0
adobe	acrobat_reader	7.0.1
adobe	acrobat_reader	7.0.2
adobe	acrobat_reader	7.0.3
adobe	acrobat_reader	7.0.4
adobe	acrobat_reader	7.0.5
adobe	acrobat_reader	7.0.6
adobe	acrobat_reader	7.0.7
adobe	acrobat_reader	7.0.8
adobe	acrobat_reader	7.0.9
adobe	acrobat_reader	7.1.0
adobe	acrobat_reader	7.1.1
adobe	acrobat_reader	7.1.3
adobe	acrobat_reader	8.0
adobe	acrobat_reader	8.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-2998