VULNERABILITY INTELLIGENCE

CVE-2009-2992

CVSS score4.3 MEDIUM
EPSS probability4.86%
CISA KEVNot currently listed
Published2009-10-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references