4.3

CVE-2009-2992

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeAcrobat Version <= 9.1.3
AdobeAcrobat Version7.0
AdobeAcrobat Version7.0.1
AdobeAcrobat Version7.0.2
AdobeAcrobat Version7.0.3
AdobeAcrobat Version7.0.4
AdobeAcrobat Version7.0.5
AdobeAcrobat Version7.0.6
AdobeAcrobat Version7.0.7
AdobeAcrobat Version7.0.8
AdobeAcrobat Version7.0.9
AdobeAcrobat Version7.1.0
AdobeAcrobat Version7.1.1
AdobeAcrobat Version7.1.3
AdobeAcrobat Version8.0
AdobeAcrobat Version8.1
AdobeAcrobat Version8.1.1
AdobeAcrobat Version8.1.2
AdobeAcrobat Version8.1.3
AdobeAcrobat Version8.1.4
AdobeAcrobat Version8.1.6
AdobeAcrobat Version9.0
AdobeAcrobat Version9.1.1
AdobeAcrobat Version9.1.2
AdobeAcrobat Reader Version <= 9.1.3
AdobeAcrobat Reader Version7.0
AdobeAcrobat Reader Version7.0.1
AdobeAcrobat Reader Version7.0.2
AdobeAcrobat Reader Version7.0.3
AdobeAcrobat Reader Version7.0.4
AdobeAcrobat Reader Version7.0.5
AdobeAcrobat Reader Version7.0.6
AdobeAcrobat Reader Version7.0.7
AdobeAcrobat Reader Version7.0.8
AdobeAcrobat Reader Version7.0.9
AdobeAcrobat Reader Version7.1.0
AdobeAcrobat Reader Version7.1.1
AdobeAcrobat Reader Version7.1.3
AdobeAcrobat Reader Version8.0
AdobeAcrobat Reader Version8.1
AdobeAcrobat Reader Version8.1.1
AdobeAcrobat Reader Version8.1.2
AdobeAcrobat Reader Version8.1.3
AdobeAcrobat Reader Version8.1.4
AdobeAcrobat Reader Version8.1.5
AdobeAcrobat Reader Version8.1.6
AdobeAcrobat Reader Version9.0
AdobeAcrobat Reader Version9.1
AdobeAcrobat Reader Version9.1.1
AdobeAcrobat Reader Version9.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.15% 0.827
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.