PT-2009-5725 · Adobe · Acrobat+1

Publicado 2009-09-25 · Atualizado 2017-09-19 · CVE-2009-3431

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 9.1.3 through 9.1.1 and earlier 9.x versions Adobe Reader and Acrobat versions 8.1.6 and earlier 8.x versions Adobe Reader and Acrobat versions 7.1.4 and earlier 7.x versions

Description A stack consumption issue allows remote attackers to cause a denial of service, resulting in an application crash, via a PDF file containing a large number of ( open square bracket characters in the argument to the alert method.

Recommendations For Adobe Reader and Acrobat versions 9.1.3 through 9.1.1 and earlier 9.x versions: update to a version that is not affected by this issue. For Adobe Reader and Acrobat versions 8.1.6 and earlier 8.x versions: update to a version that is not affected by this issue. For Adobe Reader and Acrobat versions 7.1.4 and earlier 7.x versions: update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of PDF files with a large number of ( open square bracket characters in the argument to the alert method until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3431

RHSA-2009:1499

Produtos afetados

Acrobat

Reader

Referências · 8

• 🔥 https://exploit-db.com/exploits/33017 · Exploit
• 🔥 http://securityfocus.com/bid/35148 · Exploit
• http://adobe.com/support/security/bulletins/apsb09-15.html · Nota
• http://us-cert.gov/cas/techalerts/TA09-286B.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3431 · Nota de Segurança
• http://securitytracker.com/id?1023007 · Nota
• http://vupen.com/english/advisories/2009/2898 · Aviso do Fabricante