Home > Vulnerability Database > CVE-2009-2994

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-2994

Date: October 19, 2009

Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.

Severity Score

8.1

Related Resources (9)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-2994

Url: http://www.adobe.com/support/security/bulletins/apsb09-15.html

Url: http://www.vupen.com/english/advisories/2009/2898

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156

Url: http://www.us-cert.gov/cas/techalerts/TA09-286B.html

Url: http://www.securityfocus.com/bid/36638

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-2994

Url: http://securitytracker.com/id?1023007

Url: https://www.mend.io/vulnerability-database/CVE-2009-2994

Severity Score

8.1

Weakness Type (CWE)

Buffer Errors

CWE-119

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us