CVE-2009-3462
Estado: ModificadaMedia (5.1)—
Adobe Reader y Acrobat v7.x anteriores a v7.1.4, 8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 en Unix, cuando el modo Debug está activado, permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar, relacionados con un "bug" (error o fallo de diseño) de formato.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
- Puntuación base: 5.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.97%
- Percentil entre todas las CVEs puntuadas: 93
- Fecha de la puntuación: 11/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-Other
Referencias
- http://securitytracker.com/id?1023007
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- http://www.securityfocus.com/bid/36638
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html
- http://www.vupen.com/english/advisories/2009/2898
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429
- http://securitytracker.com/id?1023007
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- http://www.securityfocus.com/bid/36638
- http://www.us-cert.gov/cas/techalerts/TA09-286B.html
- http://www.vupen.com/english/advisories/2009/2898
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-3462",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "HIGH",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-10-19T22:30:00.797",
"references": [
{
"url": "http://securitytracker.com/id?1023007",
"source": "psirt@adobe.com"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/bid/36638",
"source": "psirt@adobe.com"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
"tags": [
"Patch",
"US Government Resource"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2898",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429",
"source": "psirt@adobe.com"
},
{
"url": "http://securitytracker.com/id?1023007",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/36638",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
"tags": [
"Patch",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/2898",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a \"format bug.\""
},
{
"lang": "es",
"value": "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, 8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 en Unix, cuando el modo Debug está activado, permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar, relacionados con un \"bug\" (error o fallo de diseño) de formato."
}
],
"lastModified": "2026-06-16T23:11:39.147",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84209F08-D75D-4C02-94E4-5942B244E632",
"versionEndIncluding": "9.1.3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FECFC942-4F04-420C-A9B4-AE0C0590317F"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D75174C-EBF9-4117-9E66-80E847012853"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9762FE57-837B-4FFA-9813-AC038450EB2B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0055A38C-E421-40A1-8BC7-11856A20B8F0"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "758CC9EE-8929-405B-A845-83BAAECCB2AD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC1BD70D-7A92-4309-A40C-9BD500997390"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21AC1961-12F7-456F-9CE4-9AAF116CF141"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "749FFB51-65D4-4A4B-95F3-742440276897"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F475858-DCE2-4C93-A51A-04718DF17593"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88687272-4CD0-42A2-B727-C322ABDE3549"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93E26221-1DC1-4742-9FD5-54EADCAB70FF",
"versionEndIncluding": "9.1.3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24262AFA-2EC8-479E-8922-36DB4243E404"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1E62096-08B2-4722-A492-11E9A441E85B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA55D00C-3629-48E4-8699-F62B8D703E02"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "634396D6-4ED6-4F4D-9458-396373489589"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A265869-EF58-428E-B8BB-30CABCBE0A83"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADB421CD-85DE-4495-93B7-46708449AE27"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E20936-EE31-4CEB-A710-3165A28BAD69"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F6994B-6969-485B-9286-2592B11A47BF"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC533775-B52E-43F0-BF19-1473BE36232D"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "562772F1-1627-438E-A6B8-7D1AA5536086"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F25C9167-C6D4-4264-9197-50878EDA2D96"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
}
],
"operator": "OR"
}
]
}
],
"evaluatorImpact": "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves a Unix-only format bug when running in Debug mode that could lead to arbitrary code execution",
"sourceIdentifier": "psirt@adobe.com",
"evaluatorSolution": "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh."
}