Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Adobe Reader/Acrobat may be tricked by fake certificate

CVE-2009-2982 · published 17 years ago
Summary

Older versions of Adobe Reader and Acrobat (up to 9.1, 8.1.6, and possibly 7.1.4) can be fooled by a forged security certificate. This could let an attacker convince users to trust malicious content, leading to unintended actions or data exposure. Upgrade to a supported version or apply the vendor’s security update to protect against this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe acrobat <= 9.1.3
7.0
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
7.0.8
7.0.9
7.1.0
12 more version ranges
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
adobe acrobat_reader <= 9.1.3
7.0
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
7.0.8
7.0.9
7.1.0
14 more version ranges
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Original advisory text
An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unk...
An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unknown vectors.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
3% chance of attack within 30 days
Type
CWE-310Cryptographic Issues
Timeline
Published19 Oct 2009
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2009-2982 · NVD
Track software like this
Free during beta