CVE-2009-2990

EXPLOITED

Adobe Acrobat < 9.1.3 - Numeric Error

Title source: rule

Description

Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/16309
exploitdb WORKING POC VERIFIED
by Felipe Andres Manzano · textlocalmultiple
https://www.exploit-db.com/exploits/9990
metasploit WORKING POC GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/adobe_u3d_meshcont.rb

Scores

EPSS 0.8912
EPSS Percentile 99.5%

Details

VulnCheck KEV 2010-01-20
CWE
CWE-189
Status published
Products (50)
adobe/acrobat 7.0
adobe/acrobat 7.0.1
adobe/acrobat 7.0.2
adobe/acrobat 7.0.3
adobe/acrobat 7.0.4
adobe/acrobat 7.0.5
adobe/acrobat 7.0.6
adobe/acrobat 7.0.7
adobe/acrobat 7.0.8
adobe/acrobat 7.0.9
... and 40 more
Published Oct 19, 2009
Tracked Since Feb 18, 2026