Home > Vulnerability Database > CVE-2009-2981

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-2981

Date: October 19, 2009

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.

Severity Score

3.7

Related Resources (9)

Url: http://www.adobe.com/support/security/bulletins/apsb09-15.html

Url: http://www.vupen.com/english/advisories/2009/2898

Url: http://www.us-cert.gov/cas/techalerts/TA09-286B.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-2981

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-2981

Url: http://www.securityfocus.com/bid/36638

Url: http://securitytracker.com/id?1023007

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284

Url: https://www.mend.io/vulnerability-database/CVE-2009-2981

Severity Score

3.7

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us