CVE-2009-3462

2009-10-1922:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

unix

debug mode

arbitrary code

format bug

cve-2009-3462

nvd

7.2 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a “format bug.”

CPENameOperatorVersion
adobe:acrobatadobe acrobateq8.0
adobe:acrobatadobe acrobateq8.1.2
adobe:acrobatadobe acrobateq7.0.2
adobe:acrobatadobe acrobateq7.0.3
adobe:acrobatadobe acrobateq7.1.0
adobe:acrobatadobe acrobateq7.0.8
adobe:acrobatadobe acrobateq7.1.1
adobe:acrobatadobe acrobateq8.1.1
adobe:acrobatadobe acrobateq8.1
adobe:acrobatadobe acrobateq9.0

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	8.0
adobe:acrobat	adobe acrobat	eq	8.1.2
adobe:acrobat	adobe acrobat	eq	7.0.2
adobe:acrobat	adobe acrobat	eq	7.0.3
adobe:acrobat	adobe acrobat	eq	7.1.0
adobe:acrobat	adobe acrobat	eq	7.0.8
adobe:acrobat	adobe acrobat	eq	7.1.1
adobe:acrobat	adobe acrobat	eq	8.1.1
adobe:acrobat	adobe acrobat	eq	8.1
adobe:acrobat	adobe acrobat	eq	9.0