PT-2009-5725 · Adobe · Acrobat+1

Published 2009-09-25 · Updated 2017-09-19 · CVE-2009-3431

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 9.1.3 through 9.1.1 and earlier 9.x versions Adobe Reader and Acrobat versions 8.1.6 and earlier 8.x versions Adobe Reader and Acrobat versions 7.1.4 and earlier 7.x versions

Description A stack consumption issue allows remote attackers to cause a denial of service, resulting in an application crash, via a PDF file containing a large number of ( open square bracket characters in the argument to the alert method.

Recommendations For Adobe Reader and Acrobat versions 9.1.3 through 9.1.1 and earlier 9.x versions: update to a version that is not affected by this issue. For Adobe Reader and Acrobat versions 8.1.6 and earlier 8.x versions: update to a version that is not affected by this issue. For Adobe Reader and Acrobat versions 7.1.4 and earlier 7.x versions: update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of PDF files with a large number of ( open square bracket characters in the argument to the alert method until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3431

RHSA-2009:1499

Affected Products

Acrobat

Reader

References · 8

• 🔥 https://exploit-db.com/exploits/33017 · Exploit
• 🔥 http://securityfocus.com/bid/35148 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3431 · Security Note
• http://vupen.com/english/advisories/2009/2898 · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb09-15.html · Note
• http://us-cert.gov/cas/techalerts/TA09-286B.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532 · Note
• http://securitytracker.com/id?1023007 · Note