CVE-2009-2990 in the critical feed json
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to exe…
published 2009-10-19 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-2975
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 68.6%
- EPSS 68.6% chance of exploitation in 30 days, percentile 99.3%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Patch / fix
- acroread RHEL 3 EXTRAS 8.1.7-1
- acroread RHEL 4 EXTRAS 8.1.7-1.el4
- acroread RHEL 5 EXTRAS 8.1.7-1.el5
- acroread-plugin RHEL 3 EXTRAS 8.1.7-1
- acroread-plugin RHEL 4 EXTRAS 8.1.7-1.el4
- acroread-plugin RHEL 5 EXTRAS 8.1.7-1.el5
red hat advisories RHSA-2009:1499
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2009-2990 updated cvss 6.8
acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)
-
Red Hat Desktop version 3 Extras acroread 8.1.7-1, acroread-plugin 8.1.7-1 Red Hat Desktop version 4 Extras acroread 8.1.7-1.el4, acroread-plugin 8.1.7-1.el4 Red Hat Enterprise Linux AS version 3 Extras acroread 8.1.7-1, acroread-plugin 8.1.7-1 Red Hat Enterprise Linux AS version 4 Extras acroread 8.1.7-1.el4, acroread-plugin 8.1.7-1.el4 Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread 8.1.7-1.el5, acroread-plugin 8.1.7-1.el5 Red Hat Enterprise Linux ES version 3 Extras acroread 8.1.7-1, acroread-plugin 8.1.7-1fixed: vendor fix RHSA-2009:1499
+4 more productsfewer
Red Hat Enterprise Linux ES version 4 Extras acroread 8.1.7-1.el4, acroread-plugin 8.1.7-1.el4 Red Hat Enterprise Linux Server Supplementary (v. 5) acroread 8.1.7-1.el5, acroread-plugin 8.1.7-1.el5 Red Hat Enterprise Linux WS version 3 Extras acroread 8.1.7-1, acroread-plugin 8.1.7-1 Red Hat Enterprise Linux WS version 4 Extras acroread 8.1.7-1.el4, acroread-plugin 8.1.7-1.el4
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (Metasploit exploit/multi/fileformat/adobe_u3d_meshcont)
- Published
Exploit prediction
68.57% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/multi/fileformat/adobe_u3d_meshcont Adobe U3D CLODProgressiveMeshDeclaration Array Overrun metasploit exploit, good rank, 2009-10-13
- EDB-16309 Adobe - U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (1) remote, 2010-09-20
- EDB-9990 Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow local, 2009-11-09
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
us-cert.gov
/cas/techalerts/TA09-286B.html
third-party-advisory, patch, us-government-resource
-
adobe.com
/support/security/bulletins/apsb09-15.html
patch, vendor-advisory
-
vupen.com
/english/advisories/2009/2898
vdb-entry, patch, vendor-advisory
-
securityfocus.com
/bid/36638
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371
vdb-entry, signature
-
securitytracker.com
/id?1023007
vdb-entry
Sources
- CVE List CVE-2009-2990
- NVD CVE-2009-2990
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.