The version of Adobe Acrobat installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are reportedly affected by multiple vulnerabilities :

  - A heap overflow vulnerability. (CVE-2009-3459)

  - A memory corruption issue. (CVE-2009-2985)

  - Multiple heap overflow vulnerabilities. (CVE-2009-2986)

  - An invalid array index issue that could lead to code     execution. (CVE-2009-2990)

  - Multiple input validation vulnerabilities that could     lead to code execution. (CVE-2009-2993)

  - A buffer overflow issue. (CVE-2009-2994)

  - A heap overflow vulnerability. (CVE-2009-2997)

  - An input validation issue that could lead to code     execution. (CVE-2009-2998)

  - An input validation issue that could lead to code     execution. (CVE-2009-3458)

  - A memory corruption issue. (CVE-2009-3460)

  - An issue that could allow a malicious user to bypass     file extension security controls. (CVE-2009-3461)

  - An integer overflow vulnerability. (CVE-2009-2989)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2983)

  - An integer overflow that leads to a denial of service.
    (CVE-2009-2980)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2996)

  - An image decoder issue that leads to a denial of service.
    (CVE-2009-2984)

  - An input validation issue that could lead to a bypass     of Trust Manager restrictions. (CVE-2009-2981)

  - A certificate is used that, if compromised, could be used     in a social engineering attack. (CVE-2009-2982)

  - A stack overflow issue that could lead to a denial of     service. (CVE-2009-3431)

  - A XMP-XML entity expansion issue that could lead to a     denial of service attack. (CVE-2009-2979)

  - A remote denial of service issue in the ActiveX control.
    (CVE-2009-2987)

  - An input validation issue. (CVE-2009-2988)

  - An input validation issue specific to the ActiveX     control. (CVE-2009-2992)

  - A cross-site scripting issue when the browser plugin in     used with Google Chrome and Opera browsers.     (CVE-2007-0048, CVE-2007-0045)

Detections

Analytics

Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)

high Nessus Plugin ID 42119

Version 1.19

Version 1.18

Version 1.19 May 21, 2026, 4:37 AM CISA reference CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2009-2980" to "CVE-2009-3461") CVSSv3 score source (set to "CVE-2009-3459") Plugin Feed: 202605210437
Version 1.18 Jun 1, 2024, 5:45 AM CVSSv2 score source (Added a CVSS score source) Detection (Add support for multiple installs) Plugin Feed: 202406010545