CVE-2009-2990

Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code…

published October 19, 2009

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
69%
Percentile
99.3
In the wild
Unconfirmed
What it is

⚠️ An array index error in Adobe Reader could be a sneaky door for attackers! Even the slightest error can open up avenues for arbitrary code execution. 🔥 Think of it like a restaurant menu that has a misclassified dish – an unsuspecting customer orders a dessert, but instead, they get a spicy main course they didn’t ask for. If not treated, this could lead to some unwanted surprises! An attacker could potentially exploit this vulnerability to execute any code of their choosing, leading to unauthorized access or unwanted changes on your system. While the exact impact isn't clear due to the vagueness of the vectors, it's always better to be safe than sorry!

Put simply

Think of it like a restaurant menu that has a misclassified dish – an unsuspecting customer orders a dessert, but instead, they get a spicy main course they didn’t ask for. If not treated, this could lead to some unwanted surprises! This vulnerability arises from how Adobe Reader and Acrobat improperly handles array indexing, allowing arbitrary code execution through unspecified methods. In simpler terms, the application might accidentally trust something it shouldn't, giving unwanted powers to attackers.

What to do

An attacker could potentially exploit this vulnerability to execute any code of their choosing, leading to unauthorized access or unwanted changes on your system. While the exact impact isn't clear due to the vagueness of the vectors, it's always better to be safe than sorry! To mitigate this issue, ensure you update Adobe Reader and Acrobat to version 9.2, 8.1.7, or higher for older versions. Regularly check for any patches released by Adobe to keep your software secure. You've got this! Stay vigilant and update your software regularly for a safer experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.68570 · 99.3th percentile
Published
2009-10-19T22:00Z
EPSS history
Timeline
  • 19 OCT 22:00Z
    Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code…
    cvelistv5