CVE-2009-2990: Critical severity adobe acrobat reader vulnerability
Published Oct 19, 2009
·Updated
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Affected Software
50 affected components
Adobe Acrobat<=9.1.3
Adobe Acrobat=7.0
Adobe Acrobat=7.0.1
Adobe Acrobat=7.0.2
Adobe Acrobat=7.0.3
Adobe Acrobat=7.0.4
Adobe Acrobat=7.0.5
Adobe Acrobat=7.0.6
Adobe Acrobat=7.0.7
Adobe Acrobat=7.0.8
Adobe Acrobat=7.0.9
Adobe Acrobat=7.1.0
Adobe Acrobat=7.1.1
Adobe Acrobat=7.1.3
Adobe Acrobat=8.0
Adobe Acrobat=8.1
Adobe Acrobat=8.1.1
Adobe Acrobat=8.1.2
Adobe Acrobat=8.1.3
Adobe Acrobat=8.1.4
Adobe Acrobat=8.1.6
Adobe Acrobat=9.0
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat reader<=9.1.3
Adobe Acrobat reader=7.0
Adobe Acrobat reader=7.0.1
Adobe Acrobat reader=7.0.2
Adobe Acrobat reader=7.0.3
Adobe Acrobat reader=7.0.4
Adobe Acrobat reader=7.0.5
Adobe Acrobat reader=7.0.6
Adobe Acrobat reader=7.0.7
Adobe Acrobat reader=7.0.8
Adobe Acrobat reader=7.0.9
Adobe Acrobat reader=7.1.0
Adobe Acrobat reader=7.1.1
Adobe Acrobat reader=7.1.3
Adobe Acrobat reader=8.0
Adobe Acrobat reader=8.1
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=9.1.2
Remediation
Patch Available
Patch Available
Event History
Oct 19, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2990?
CVE-2009-2990 has a moderate severity rating allowing attackers to potentially execute arbitrary code.
2
How do I fix CVE-2009-2990?
To fix CVE-2009-2990, users should update Adobe Reader and Acrobat to version 9.2 or later, 8.1.7 or later, or 7.1.5 if applicable.
3
What products are affected by CVE-2009-2990?
CVE-2009-2990 affects Adobe Reader and Acrobat versions 9.x before 9.2, 8.x before 8.1.7, and potentially 7.x through 7.1.4.
4
Can CVE-2009-2990 lead to remote code execution?
Yes, CVE-2009-2990 may allow attackers to execute arbitrary code through unspecified vectors.
5
Is there a workaround for CVE-2009-2990?
There is no specific workaround for CVE-2009-2990, making updating the application the recommended approach.