# CVEs published 2009-10-19 31 CVEs were published on October 19, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-2979](https://cve.now/CVE-2009-2979.md): Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, (no CVSS) - [CVE-2009-2980](https://cve.now/CVE-2009-2980.md): Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of se (no CVSS) - [CVE-2009-2981](https://cve.now/CVE-2009-2981.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers (no CVSS) - [CVE-2009-2982](https://cve.now/CVE-2009-2982.md): An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote a (no CVSS) - [CVE-2009-2983](https://cve.now/CVE-2009-2983.md): Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memo (no CVSS) - [CVE-2009-2984](https://cve.now/CVE-2009-2984.md): Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows (no CVSS) - [CVE-2009-2985](https://cve.now/CVE-2009-2985.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corrupt (no CVSS) - [CVE-2009-2986](https://cve.now/CVE-2009-2986.md): Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attacker (no CVSS) - [CVE-2009-2987](https://cve.now/CVE-2009-2987.md): Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Window (no CVSS) - [CVE-2009-2988](https://cve.now/CVE-2009-2988.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to ca (no CVSS) - [CVE-2009-2989](https://cve.now/CVE-2009-2989.md): Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrar (no CVSS) - [CVE-2009-2990](https://cve.now/CVE-2009-2990.md): Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to exec (no CVSS) - [CVE-2009-2991](https://cve.now/CVE-2009-2991.md): Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before (no CVSS) - [CVE-2009-2992](https://cve.now/CVE-2009-2992.md): An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properl (no CVSS) - [CVE-2009-2993](https://cve.now/CVE-2009-2993.md): The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implemen (no CVSS) - [CVE-2009-2994](https://cve.now/CVE-2009-2994.md): Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrar (no CVSS) - [CVE-2009-2995](https://cve.now/CVE-2009-2995.md): Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via u (no CVSS) - [CVE-2009-2996](https://cve.now/CVE-2009-2996.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corrupt (no CVSS) - [CVE-2009-2997](https://cve.now/CVE-2009-2997.md): Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execu (no CVSS) - [CVE-2009-2998](https://cve.now/CVE-2009-2998.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers (no CVSS) - [CVE-2009-3458](https://cve.now/CVE-2009-3458.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers (no CVSS) - [CVE-2009-3460](https://cve.now/CVE-2009-3460.md): Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corrupt (no CVSS) - [CVE-2009-3461](https://cve.now/CVE-2009-3461.md): Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vector (no CVSS) - [CVE-2009-3462](https://cve.now/CVE-2009-3462.md): Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to exec (no CVSS) - [CVE-2005-4881](https://cve.now/CVE-2005-4881.md): The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in st (no CVSS) - [CVE-2006-6404](https://cve.now/CVE-2006-6404.md): INNOVATION Data Processing FDR/UPSTREAM 3.3.0 (GA Oct 2003) allows remote attackers to cause a denial of service (service outage) via a sequ (no CVSS) - [CVE-2009-2970](https://cve.now/CVE-2009-2970.md): Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in (no CVSS) - [CVE-2009-3228](https://cve.now/CVE-2009-3228.md): The tc\_fill\_tclass function in net/sched/sch\_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 (no CVSS) - [CVE-2009-3546](https://cve.now/CVE-2009-3546.md): The \_gdGetColors function in gd\_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certa (no CVSS) - [CVE-2009-3612](https://cve.now/CVE-2009-3612.md): The tcf\_fill\_node function in net/sched/cls\_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and ear (no CVSS) - [CVE-2009-3613](https://cve.now/CVE-2009-3613.md): The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-10-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.