NVD

Id
50210  
Name
CVE-2009-2993  
Description
The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-19  
Modified Date
2010-08-21  
Seq
2009-2993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254157 50210 CVE-2009-2993 oval:org.mitre.oval:def:5822  View
254158 50210 CVE-2009-2993 1023007  View
254159 50210 CVE-2009-2993 http://www.adobe.com/support/security/bulletins/apsb09-15.html  View
254160 50210 CVE-2009-2993 VU#257117  View
254161 50210 CVE-2009-2993 36638  View
254162 50210 CVE-2009-2993 36664  View
254163 50210 CVE-2009-2993 TA09-286B  View
254164 50210 CVE-2009-2993 ADV-2009-2898  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41206 JVNDB-2009-002213 Adobe Reader および Acrobat の複数の JavaScript メソッドに脆弱性 Adobe Reader および Acrobat には、JavaScript メソッドの実行を制限する仕組みに脆弱性が存在します。 CVE-2009-2993 40424 CVE-2009-2993 50210 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002213.html 2009-10-14 2009-11-13 View