PT-2009-1122 · Adobe · Reader+1

Vincent Danen · CVE-2009-4324 · Publicado 2009-12-14 · Atualizado 2026-02-23

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2 Adobe Reader versions 9.x through 9.3 Adobe Acrobat versions 8.x through 8.2 Adobe Acrobat versions 9.x through 9.3

Description The issue is related to a use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api, which can be exploited by remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams. This vulnerability has been exploited in the wild. The vulnerability is associated with resource management errors in Adobe Reader and Adobe Acrobat.

Recommendations For Adobe Reader versions 8.x through 8.2, update to version 8.2 or later. For Adobe Reader versions 9.x through 9.3, update to version 9.3 or later. For Adobe Acrobat versions 8.x through 8.2, update to version 8.2 or later. For Adobe Acrobat versions 9.x through 9.3, update to version 9.3 or later. As a temporary workaround, consider avoiding the use of the Doc.media.newPlayer method in Multimedia.api until a patch is available. Restrict access to crafted PDF files using ZLib compressed streams to minimize the risk of exploitation.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

CWE-399

Identificadores relacionados

BDU:2022-03587

CVE-2009-4324

RHSA-2010:0037

RHSA-2010:0038

RHSA-2010:0060

Produtos afetados

Acrobat

Reader

Referências · 35

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_media_newplayer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_media_newplayer.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16503 · Exploit
• 🔥 https://exploit-db.com/exploits/16623 · Exploit
• 🔥 http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html · Exploit
• 🔥 https://exploit-db.com/exploits/10618 · Exploit
• http://redhat.com/support/errata/RHSA-2010-0060.html · Aviso do Fabricante
• http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html · Aviso do Fabricante
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota
• http://shadowserver.org/wiki/pmwiki.php/Calendar/20091214 · Nota
• https://bdu.fstec.ru/vul/2022-03587 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html · Aviso do Fabricante
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324 · Nota
• http://securityfocus.com/bid/37331 · Nota
• http://secunia.com/advisories/37690 · Aviso do Fabricante