← Database

CVE-2009-2979

MEDIUM CVSS: 4.3 Published: 2009-10-19 Modified: 2026-06-16

Description

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.

Affected Platforms

Adobe AcrobatAdobe Acrobat Reader

Weakness Type

NVD-CWE-Other

References