CVE-2009-2988: Adobe Acrobat

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors.

Affected products

• Adobe Acrobat: version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; version 7.0.5 only; …
• Adobe Acrobat Reader: version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; version 7.0.5 only; …

Published 2009-10-19. Last modified 2026-06-16.