CVE-2009-2992

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1023007
http://www.adobe.com/support/security/bulletins/apsb09-15.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/36638
http://www.us-cert.gov/cas/techalerts/TA09-286B.htmlPatch, US Government Resource
http://www.vupen.com/english/advisories/2009/2898Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054
http://securitytracker.com/id?1023007
http://www.adobe.com/support/security/bulletins/apsb09-15.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/36638
http://www.us-cert.gov/cas/techalerts/TA09-286B.htmlPatch, US Government Resource
http://www.vupen.com/english/advisories/2009/2898Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054

Timeline

Published: Oct 19, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-29939.3The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implemen CVE-2009-29949.3Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrar CVE-2009-29954.3Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via u CVE-2009-29969.3Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corrupt CVE-2009-29979.3Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execu CVE-2009-29989.3Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers CVE-2009-29994.3The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network dis CVE-2009-30007.1The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is en CVE-2009-30014.9The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, whi CVE-2009-30024.9The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read th CVE-2009-30034.3Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an ar CVE-2009-30044.3Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitr