CVE-2009-2979
Fixed in a distro release EPSS 3%
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.
Products: adobe acrobat, adobe acrobat_reader
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | acroread | 0:8.1.7-1 |
| Red Hat rhel extras 3 | acroread-plugin | 0:8.1.7-1 |
| Red Hat rhel extras 4 | acroread | 0:8.1.7-1.el4 |
| Red Hat rhel extras 4 | acroread-plugin | 0:8.1.7-1.el4 |
| Red Hat rhel extras 5 | acroread | 0:8.1.7-1.el5 |
| Red Hat rhel extras 5 | acroread-plugin | 0:8.1.7-1.el5 |