PT-2009-2878 · Adobe · Reader+1
Alin Rad Pop
·
Publicado
2009-06-11
·
Atualizado
2018-10-11
·
CVE-2009-0198
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Reader versions 7.0 through 7.1.2
Adobe Reader versions 8.0 through 8.1.5
Adobe Reader versions 9.0 through 9.1.1
Adobe Acrobat versions 7.0 through 7.1.2
Adobe Acrobat versions 8.0 through 8.1.5
Adobe Acrobat versions 9.0 through 9.1.1
Description
The issue is related to a heap-based buffer overflow in the JBIG2 filter, which can be triggered by a crafted PDF file containing JBIG2 text region segments with Huffman encoding. This can lead to memory corruption, causing a denial of service, or potentially allow remote attackers to execute arbitrary code.
Recommendations
For Adobe Reader versions 7.0 through 7.1.2, update to version 7.1.3 or later.
For Adobe Reader versions 8.0 through 8.1.5, update to version 8.1.6 or later.
For Adobe Reader versions 9.0 through 9.1.1, update to version 9.1.2 or later.
For Adobe Acrobat versions 7.0 through 7.1.2, update to version 7.1.3 or later.
For Adobe Acrobat versions 8.0 through 8.1.5, update to version 8.1.6 or later.
For Adobe Acrobat versions 9.0 through 9.1.1, update to version 9.1.2 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Reader