CVE-2009-3461

2009-10-1922:30:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2009-3461

adobe acrobat

vulnerability

file-extension restrictions

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors.

Affected configurations

NVD

Node

adobeacrobatMatch9.0.0

adobeacrobatMatch9.1

adobeacrobatMatch9.1.1

adobeacrobatMatch9.1.2

adobeacrobatMatch9.1.3

CPENameOperatorVersion
adobe:acrobatadobe acrobateq9.0.0
adobe:acrobatadobe acrobateq9.1
adobe:acrobatadobe acrobateq9.1.1
adobe:acrobatadobe acrobateq9.1.2
adobe:acrobatadobe acrobateq9.1.3

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	9.0.0
adobe:acrobat	adobe acrobat	eq	9.1
adobe:acrobat	adobe acrobat	eq	9.1.1
adobe:acrobat	adobe acrobat	eq	9.1.2
adobe:acrobat	adobe acrobat	eq	9.1.3