CVE-2009-2990
EXPLOITEDAdobe Acrobat < 9.1.3 - Numeric Error
Title source: ruleDescription
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/16309
exploitdb
WORKING POC
VERIFIED
by Felipe Andres Manzano · textlocalmultiple
https://www.exploit-db.com/exploits/9990
metasploit
WORKING POC
GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/adobe_u3d_meshcont.rb
References (6)
Scores
EPSS
0.8912
EPSS Percentile
99.5%
Details
VulnCheck KEV
2010-01-20
CWE
CWE-189
Status
published
Products (50)
adobe/acrobat
7.0
adobe/acrobat
7.0.1
adobe/acrobat
7.0.2
adobe/acrobat
7.0.3
adobe/acrobat
7.0.4
adobe/acrobat
7.0.5
adobe/acrobat
7.0.6
adobe/acrobat
7.0.7
adobe/acrobat
7.0.8
adobe/acrobat
7.0.9
... and 40 more
Published
Oct 19, 2009
Tracked Since
Feb 18, 2026