Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2009:1499 18 CVEs

Red Hat Security Advisory: acroread security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_extras:3 acroread 0:8.1.7-1
Red Hat · RHEL 3 rhel_extras:3 acroread-plugin 0:8.1.7-1
Red Hat · RHEL 4 rhel_extras:4 acroread 0:8.1.7-1.el4
Red Hat · RHEL 4 rhel_extras:4 acroread-plugin 0:8.1.7-1.el4
Red Hat · RHEL 5 rhel_extras:5::client acroread 0:8.1.7-1.el5
Red Hat · RHEL 5 rhel_extras:5::client acroread-plugin 0:8.1.7-1.el5
Red Hat · RHEL 5 rhel_extras:5::server acroread 0:8.1.7-1.el5
Red Hat · RHEL 5 rhel_extras:5::server acroread-plugin 0:8.1.7-1.el5

Vulnerabilities 18

  • High 8.8
    CVE-2009-3459 Exploited Public exploit EPSS 87%

    Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows re…

    KEV May 20, 2026
  • Unscored —
    CVE-2009-2979

    Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-X…

  • Unscored —
    CVE-2009-2980

    Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to…

  • Unscored —
    CVE-2009-2981

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which m…

  • Unscored —
    CVE-2009-2983 Public exploit EPSS 12%

    Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a de…

  • Unscored —
    CVE-2009-2985

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of se…

  • Unscored —
    CVE-2009-2986

    Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2…

  • Unscored —
    CVE-2009-2988

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which a…

  • Unscored —
    CVE-2009-2990 Public exploit EPSS 69%

    Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might al…

  • Unscored —
    CVE-2009-2991

    Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before …

  • Unscored —
    CVE-2009-2993

    The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does …

  • Unscored —
    CVE-2009-2994 Public exploit EPSS 18%

    Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attacker…

  • Unscored —
    CVE-2009-2996

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of se…

  • Unscored —
    CVE-2009-2997

    Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might all…

  • Unscored —
    CVE-2009-2998 EPSS 10%

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which m…

  • Unscored —
    CVE-2009-3431 Public exploit EPSS 22%

    Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and ea…

  • Unscored —
    CVE-2009-3458 EPSS 10%

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which m…

  • Unscored —
    CVE-2009-3462

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, al…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.adobe.com/support/security/bulletins/apsb09-15.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528659
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528666
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1499.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2979
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2979
  • report
    https://access.redhat.com/security/cve/CVE-2009-2980
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2980
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2980
  • report
    https://access.redhat.com/security/cve/CVE-2009-2981
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2981
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2981
  • report
    https://access.redhat.com/security/cve/CVE-2009-2983
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2983
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2983
  • report
    https://access.redhat.com/security/cve/CVE-2009-2985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2985
  • report
    https://access.redhat.com/security/cve/CVE-2009-2986
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2986
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2986
  • report
    https://access.redhat.com/security/cve/CVE-2009-2988
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2988
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2988
  • report
    https://access.redhat.com/security/cve/CVE-2009-2990
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2990
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2990
  • report
    https://access.redhat.com/security/cve/CVE-2009-2991
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2991
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2991
  • report
    https://access.redhat.com/security/cve/CVE-2009-2993
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2993
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2993
  • report
    https://access.redhat.com/security/cve/CVE-2009-2994
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2994