« Volver al listado

CVE-2009-3461

Estado: ModificadaAlta (9.3)—

Vulnerabilidad sin especificar en Adobe Acrobat v9.x anteriores a v9.2 permite a atacantes evitar las restricciones de extensión de archivo previstas a través de vectores de ataque desconocidos.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Acrobat

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-3461",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-10-19T22:30:00.767",
  "references": [
    {
      "url": "http://securitytracker.com/id?1023007",
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/36638",
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/2898",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466",
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://securitytracker.com/id?1023007",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/36638",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/2898",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en Adobe Acrobat v9.x anteriores a v9.2 permite a atacantes evitar las restricciones de extensión de archivo previstas a través de vectores de ataque desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:11:39.040",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FF485FB-3317-4C89-B636-F22FF19B00BE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F475858-DCE2-4C93-A51A-04718DF17593"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88687272-4CD0-42A2-B727-C322ABDE3549"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an issue that could allow a malicious user to bypass file extension security controls. This issue is specific to Acrobat 9.X.",
  "sourceIdentifier": "psirt@adobe.com",
  "evaluatorSolution": "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh."
}