Executive Summary

Informations
Name CVE-2009-0193 First vendor Publication 2009-03-24
Vendor Cve Last vendor Modification 2018-11-08

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0193

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 77

OpenVAS Exploits

Date Description
2009-06-05 Name : Ubuntu USN-743-1 (gs-gpl)
File : nvt/ubuntu_743_1.nasl
2009-06-05 Name : Ubuntu USN-744-1 (lcms)
File : nvt/ubuntu_744_1.nasl
2009-04-28 Name : SuSE Security Summary SUSE-SR:2009:009
File : nvt/suse_sr_2009_009.nasl
2009-04-20 Name : Gentoo Security Advisory GLSA 200904-17 (acroread)
File : nvt/glsa_200904_17.nasl
2009-03-31 Name : RedHat Security Advisory RHSA-2009:0376
File : nvt/RHSA_2009_0376.nasl
2009-03-31 Name : SuSE Security Advisory SUSE-SA:2009:014 (acroread)
File : nvt/suse_sa_2009_014.nasl
2009-03-03 Name : Buffer Overflow Vulnerability in Adobe Acrobat and Reader (Win)
File : nvt/secpod_adobe_prdts_bof_vuln_win.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
53648 Adobe Acrobat Reader PDF JBIG2 Symbol Dictionary Segment Handling Overflow

Nessus® Vulnerability Scanner

Date Description
2011-01-27 Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_acroread-6121.nasl - Type : ACT_GATHER_INFO
2011-01-27 Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_acroread_ja-6161.nasl - Type : ACT_GATHER_INFO
2009-09-24 Name : The remote SuSE 11 host is missing a security update.
File : suse_11_acroread-090325.nasl - Type : ACT_GATHER_INFO
2009-09-24 Name : The remote SuSE 11 host is missing a security update.
File : suse_11_acroread_ja-090415.nasl - Type : ACT_GATHER_INFO
2009-08-28 Name : The version of Adobe Acrobat on the remote Windows host is affected by multip...
File : adobe_acrobat_91.nasl - Type : ACT_GATHER_INFO
2009-08-24 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2009-0376.nasl - Type : ACT_GATHER_INFO
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_0_acroread-090325.nasl - Type : ACT_GATHER_INFO
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_acroread-090325.nasl - Type : ACT_GATHER_INFO
2009-04-21 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200904-17.nasl - Type : ACT_GATHER_INFO
2009-03-27 Name : The remote openSUSE host is missing a security update.
File : suse_acroread-6120.nasl - Type : ACT_GATHER_INFO
2009-03-11 Name : The PDF file viewer on the remote Windows host is affected by multiple vulner...
File : adobe_reader_91.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/34229
BUGTRAQ http://www.securityfocus.com/archive/1/502155/100/0/threaded
CONFIRM http://www.adobe.com/support/security/bulletins/apsb09-04.html
GENTOO http://security.gentoo.org/glsa/glsa-200904-17.xml
MISC http://secunia.com/secunia_research/2009-14/
REDHAT http://www.redhat.com/support/errata/RHSA-2009-0376.html
SECTRACK http://www.securitytracker.com/id?1021892
SECUNIA http://secunia.com/advisories/34392
http://secunia.com/advisories/34490
http://secunia.com/advisories/34706
http://secunia.com/advisories/34790
SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1
SUSE http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
VUPEN http://www.vupen.com/english/advisories/2009/1019

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
Date Informations
2022-10-19 01:08:06
  • Multiple Updates
2021-05-04 12:09:02
  • Multiple Updates
2021-04-22 01:09:22
  • Multiple Updates
2020-05-23 01:39:56
  • Multiple Updates
2020-05-23 00:23:14
  • Multiple Updates
2018-11-30 12:02:43
  • Multiple Updates
2018-11-09 00:19:42
  • Multiple Updates
2018-10-31 00:19:55
  • Multiple Updates
2018-10-12 00:20:35
  • Multiple Updates
2016-06-29 00:04:14
  • Multiple Updates
2016-06-28 17:33:42
  • Multiple Updates
2016-04-26 18:34:05
  • Multiple Updates
2014-02-17 10:48:26
  • Multiple Updates
2013-05-10 23:42:28
  • Multiple Updates