PT-2009-1114 · Adobe · Reader+1

Kralor · Publicado 2009-03-19 · Atualizado 2025-10-22 · CVE-2009-0927

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader and Adobe Acrobat versions 9.0 through 9.0, 8.0 through 8.1.2, and 7.0 through 7.1.0

Description The issue is caused by insufficient input validation in the Adobe Acrobat PDF editing program, allowing remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object.

Recommendations For Adobe Reader and Adobe Acrobat versions 9.0 through 9.0, update to version 9.1 or later. For Adobe Reader and Adobe Acrobat versions 8.0 through 8.1.2, update to version 8.1.3 or later. For Adobe Reader and Adobe Acrobat versions 7.0 through 7.1.0, update to version 7.1.1 or later.

Exploit

Correção

Stack Overflow

RCE

Enumeração de Fraquezas

CWE-121

CWE-20

Identificadores relacionados

BDU:2021-04404

CVE-2009-0927

RHSA-2008:0974

Produtos afetados

Acrobat

Reader

Referências · 31

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_geticon.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_geticon.rb · Exploit
• 🔥 http://exploit-db.com/exploits/9579 · Exploit
• 🔥 https://exploit-db.com/exploits/16606 · Exploit
• 🔥 https://exploit-db.com/exploits/16681 · Exploit
• 🔥 https://exploit-db.com/exploits/8595 · Exploit
• 🔥 https://exploit-db.com/exploits/9579 · Exploit
• http://securityfocus.com/bid/34169 · Nota
• http://adobe.com/support/security/bulletins/apsb09-04.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-04404 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49312 · Nota
• http://securitytracker.com/id?1021861 · Nota
• https://t.me/cveNotify/139792 · Publicação no Telegram