Lucene search

K
cveAdobeCVE-2009-3458
HistoryOct 19, 2009 - 10:30 p.m.

CVE-2009-3458

2009-10-1922:30:00
CWE-20
adobe
web.nvd.nist.gov
43
adobe
reader
acrobat
cve-2009-3458
arbitrary code execution
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.795

Percentile

98.3%

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998.

Affected configurations

Nvd
Node
adobeacrobatRange9.1.3
OR
adobeacrobatMatch7.0
OR
adobeacrobatMatch7.0.1
OR
adobeacrobatMatch7.0.2
OR
adobeacrobatMatch7.0.3
OR
adobeacrobatMatch7.0.4
OR
adobeacrobatMatch7.0.5
OR
adobeacrobatMatch7.0.6
OR
adobeacrobatMatch7.0.7
OR
adobeacrobatMatch7.0.8
OR
adobeacrobatMatch7.0.9
OR
adobeacrobatMatch7.1.0
OR
adobeacrobatMatch7.1.1
OR
adobeacrobatMatch7.1.3
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
Node
adobeacrobat_readerRange9.1.3
OR
adobeacrobat_readerMatch7.0
OR
adobeacrobat_readerMatch7.0.1
OR
adobeacrobat_readerMatch7.0.2
OR
adobeacrobat_readerMatch7.0.3
OR
adobeacrobat_readerMatch7.0.4
OR
adobeacrobat_readerMatch7.0.5
OR
adobeacrobat_readerMatch7.0.6
OR
adobeacrobat_readerMatch7.0.7
OR
adobeacrobat_readerMatch7.0.8
OR
adobeacrobat_readerMatch7.0.9
OR
adobeacrobat_readerMatch7.1.0
OR
adobeacrobat_readerMatch7.1.1
OR
adobeacrobat_readerMatch7.1.3
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.3
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
VendorProductVersionCPE
adobeacrobat7.1.1cpe:/a:adobe:acrobat:7.1.1:::
adobeacrobat9.1.1cpe:/a:adobe:acrobat:9.1.1:::
adobeacrobat8.1cpe:/a:adobe:acrobat:8.1:::
adobeacrobat8.1.4cpe:/a:adobe:acrobat:8.1.4:::
adobeacrobat7.1.3cpe:/a:adobe:acrobat:7.1.3:::
adobeacrobat7.0cpe:/a:adobe:acrobat:7.0:::
adobeacrobat7.0.5cpe:/a:adobe:acrobat:7.0.5:::
adobeacrobat7.0.3cpe:/a:adobe:acrobat:7.0.3:::
adobeacrobat8.1.1cpe:/a:adobe:acrobat:8.1.1:::
adobeacrobat7.0.7cpe:/a:adobe:acrobat:7.0.7:::
Rows per page:
1-10 of 241

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.795

Percentile

98.3%