10 - GLSA-200907-06

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Adobe Reader: User-assisted execution of arbitrary code

Informations
Name	GLSA-200907-06	First vendor Publication	2009-07-12
Vendor	Gentoo	Last vendor Modification	2009-07-12
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Adobe Reader is vulnerable to remote code execution via crafted PDF files.

Background

Adobe Reader is a PDF reader released by Adobe.

Description

Multiple vulnerabilities have been reported in Adobe Reader:

* Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in the JBIG2 filter (CVE-2009-0198).

* Mark Dowd of the IBM Internet Security Systems X-Force and Nicolas Joly of VUPEN Security reported multiple heap-based buffer overflows in the JBIG2 filter (CVE-2009-0509, CVE-2009-0510, CVE-2009-0511,
CVE-2009-0512, CVE-2009-0888, CVE-2009-0889)

* Arr1val reported that multiple methods in the JavaScript API might lead to memory corruption when called with crafted arguments (CVE-2009-1492, CVE-2009-1493).

* An anonymous researcher reported a stack-based buffer overflow related to U3D model files with a crafted extension block (CVE-2009-1855).

* Jun Mao and Ryan Smith of iDefense Labs reported an integer overflow related to the FlateDecode filter, which triggers a heap-based buffer overflow (CVE-2009-1856).

* Haifei Li of Fortinet's FortiGuard Global Security Research Team reported a memory corruption vulnerability related to TrueType fonts (CVE-2009-1857).

* The Apple Product Security Team reported a memory corruption vulnerability in the JBIG2 filter (CVE-2009-1858).

* Matthew Watchinski of Sourcefire VRT reported an unspecified memory corruption (CVE-2009-1859).

* Will Dormann of CERT reported multiple heap-based buffer overflows when processing JPX (aka JPEG2000) stream that trigger heap memory corruption (CVE-2009-1861).

* Multiple unspecified vulnerabilities have been discovered (CVE-2009-2028).

Impact

A remote attacker could entice a user to open a specially crafted document, possibly resulting in the execution of arbitrary code with the privileges of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Reader users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/acroread-8.1.6"

References

[ 1 ] CVE-2009-0198 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0198
[ 2 ] CVE-2009-0509 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0509
[ 3 ] CVE-2009-0510 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0510
[ 4 ] CVE-2009-0511 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0511
[ 5 ] CVE-2009-0512 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0512
[ 6 ] CVE-2009-0888 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0888
[ 7 ] CVE-2009-0889 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0889
[ 8 ] CVE-2009-1492 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1492
[ 9 ] CVE-2009-1493 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1493
[ 10 ] CVE-2009-1855 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1855
[ 11 ] CVE-2009-1856 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1856
[ 12 ] CVE-2009-1857 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1857
[ 13 ] CVE-2009-1858 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1858
[ 14 ] CVE-2009-1859 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1859
[ 15 ] CVE-2009-1861 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1861
[ 16 ] CVE-2009-2028 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2028

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200907-06.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-200907-06.xml

CWE : Common Weakness Enumeration

%	Id	Name
60 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
33 %	CWE-399	Resource Management Errors
7 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:22229

Oval ID:	oval:org.mitre.oval:def:22229
Title:	ELSA-2009:1109: acroread security update (Critical)
Description:	Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1109-01 CVE-2009-0198 CVE-2009-0509 CVE-2009-0510 CVE-2009-0511 CVE-2009-0512 CVE-2009-0888 CVE-2009-0889 CVE-2009-1855 CVE-2009-1856 CVE-2009-1857 CVE-2009-1858 CVE-2009-1859 CVE-2009-1861 CVE-2009-2028	Version:	61
Platform(s):	Oracle Linux 5	Product(s):	acroread
Definition Synopsis:
Oracle Linux 5.x rpm test acroread-plugin is earlier than 0:8.1.6-2.el5 AND acroread is earlier than 0:8.1.6-2.el5

Definition Id: oval:org.mitre.oval:def:22282

Oval ID:	oval:org.mitre.oval:def:22282
Title:	ELSA-2009:0478: acroread security update (Critical)
Description:	The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0478-01 CVE-2009-1492 CVE-2009-1493	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	acroread
Definition Synopsis:
Oracle Linux 5.x rpm test acroread-plugin is earlier than 0:8.1.5-1.el5 AND acroread is earlier than 0:8.1.5-1.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Acrobat cpe:2.3:a:adobe:acrobat:9.1:::::::* cpe:2.3:a:adobe:acrobat:9.1::standard::::: cpe:2.3:a:adobe:acrobat:9.1:-:pro:::::* cpe:2.3:a:adobe:acrobat:9.0.0:::::::* cpe:2.3:a:adobe:acrobat:9.0:::::::* cpe:2.3:a:adobe:acrobat:9.0::standard::::: cpe:2.3:a:adobe:acrobat:9.0::professional::::: cpe:2.3:a:adobe:acrobat:9.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:9:::::::* cpe:2.3:a:adobe:acrobat:8.2.6:::::::* cpe:2.3:a:adobe:acrobat:8.2.5:::::::* cpe:2.3:a:adobe:acrobat:8.2.4:::::::* cpe:2.3:a:adobe:acrobat:8.2.3:::::::* cpe:2.3:a:adobe:acrobat:8.2.2:::::::* cpe:2.3:a:adobe:acrobat:8.2.1:::::::* cpe:2.3:a:adobe:acrobat:8.2:::::::* cpe:2.3:a:adobe:acrobat:8.1.7:::::::* cpe:2.3:a:adobe:acrobat:8.1.6:::::::* cpe:2.3:a:adobe:acrobat:8.1.5:::::::* cpe:2.3:a:adobe:acrobat:8.1.4:::::::* cpe:2.3:a:adobe:acrobat:8.1.4::standard::::: cpe:2.3:a:adobe:acrobat:8.1.4::professional::::: cpe:2.3:a:adobe:acrobat:8.1.3:::::::* cpe:2.3:a:adobe:acrobat:8.1.3::standard::::: cpe:2.3:a:adobe:acrobat:8.1.3::professional::::: cpe:2.3:a:adobe:acrobat:8.1.3:-:pro:::::* cpe:2.3:a:adobe:acrobat:8.1.2:::::::* cpe:2.3:a:adobe:acrobat:8.1.2::standard::::: cpe:2.3:a:adobe:acrobat:8.1.2::professional::::: cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:3d:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:standard:::::* cpe:2.3:a:adobe:acrobat:8.1.2:-:pro:::::* cpe:2.3:a:adobe:acrobat:8.1.1:::::::* cpe:2.3:a:adobe:acrobat:8.1.1::standard::::: cpe:2.3:a:adobe:acrobat:8.1.1::professional::::: cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:::::* cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:::::* cpe:2.3:a:adobe:acrobat:8.1:::::::* cpe:2.3:a:adobe:acrobat:8.1::standard::::: cpe:2.3:a:adobe:acrobat:8.1::windows::::: cpe:2.3:a:adobe:acrobat:8.0:::::::* cpe:2.3:a:adobe:acrobat:8.0::professional::::: cpe:2.3:a:adobe:acrobat:8.0::standard::::: cpe:2.3:a:adobe:acrobat:8.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:8:::::::* cpe:2.3:a:adobe:acrobat:7.1.4:::::::* cpe:2.3:a:adobe:acrobat:7.1.3:::::::* cpe:2.3:a:adobe:acrobat:7.1.2:::::::* cpe:2.3:a:adobe:acrobat:7.1.1:::::::* cpe:2.3:a:adobe:acrobat:7.1.1::standard::::: cpe:2.3:a:adobe:acrobat:7.1.0:::::::* cpe:2.3:a:adobe:acrobat:7.1::standard::::: cpe:2.3:a:adobe:acrobat:7.1:::::::* cpe:2.3:a:adobe:acrobat:7.1::professional::::: cpe:2.3:a:adobe:acrobat:7.0.9:::::::* cpe:2.3:a:adobe:acrobat:7.0.9::professional::::: cpe:2.3:a:adobe:acrobat:7.0.8:::::::* cpe:2.3:a:adobe:acrobat:7.0.8::elements::::: cpe:2.3:a:adobe:acrobat:7.0.8::standard::::: cpe:2.3:a:adobe:acrobat:7.0.8::professional::::: cpe:2.3:a:adobe:acrobat:7.0.7:::::::* cpe:2.3:a:adobe:acrobat:7.0.7::professional::::: cpe:2.3:a:adobe:acrobat:7.0.7::standard::::: cpe:2.3:a:adobe:acrobat:7.0.6:::::::* cpe:2.3:a:adobe:acrobat:7.0.6::professional::::: cpe:2.3:a:adobe:acrobat:7.0.6::standard::::: cpe:2.3:a:adobe:acrobat:7.0.5:::::::* cpe:2.3:a:adobe:acrobat:7.0.5::professional::::: cpe:2.3:a:adobe:acrobat:7.0.5::standard::::: cpe:2.3:a:adobe:acrobat:7.0.4:::::::* cpe:2.3:a:adobe:acrobat:7.0.4::professional::::: cpe:2.3:a:adobe:acrobat:7.0.4::standard::::: cpe:2.3:a:adobe:acrobat:7.0.3:::::::* cpe:2.3:a:adobe:acrobat:7.0.3::professional::::: cpe:2.3:a:adobe:acrobat:7.0.3::standard::::: cpe:2.3:a:adobe:acrobat:7.0.2:::::::* cpe:2.3:a:adobe:acrobat:7.0.2::professional::::: cpe:2.3:a:adobe:acrobat:7.0.2::standard::::: cpe:2.3:a:adobe:acrobat:7.0.1:::::::* cpe:2.3:a:adobe:acrobat:7.0.1::professional::::: cpe:2.3:a:adobe:acrobat:7.0.1::standard::::: cpe:2.3:a:adobe:acrobat:7.0:::::::* cpe:2.3:a:adobe:acrobat:7.0::standard::::: cpe:2.3:a:adobe:acrobat:7.0::professional::::: cpe:2.3:a:adobe:acrobat:7.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:7:::::::* cpe:2.3:a:adobe:acrobat:6.0.6:::::::* cpe:2.3:a:adobe:acrobat:6.0.5:::::::* cpe:2.3:a:adobe:acrobat:6.0.4:::::::* cpe:2.3:a:adobe:acrobat:6.0.4::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.3:::::::* cpe:2.3:a:adobe:acrobat:6.0.3::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.2:::::::* cpe:2.3:a:adobe:acrobat:6.0.2::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.1:::::::* cpe:2.3:a:adobe:acrobat:6.0.1::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0:::::::* cpe:2.3:a:adobe:acrobat:6.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0.6:::::::* cpe:2.3:a:adobe:acrobat:5.0.5:::::::* cpe:2.3:a:adobe:acrobat:5.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0.10:::::::* cpe:2.3:a:adobe:acrobat:5.0.10::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0:::::::* cpe:2.3:a:adobe:acrobat:5.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5c:::::::* cpe:2.3:a:adobe:acrobat:4.0.5c::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5a:::::::* cpe:2.3:a:adobe:acrobat:4.0.5a::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5:::::::* cpe:2.3:a:adobe:acrobat:4.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0:::::::* cpe:2.3:a:adobe:acrobat:4.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:3.1:::::::* cpe:2.3:a:adobe:acrobat:3.1::mac_os_x::::: cpe:2.3:a:adobe:acrobat:3.0:::::::* cpe:2.3:a:adobe:acrobat:3.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:::::::: cpe:2.3:a:adobe:acrobat:::::classic:::*	122
Application	Adobe Acrobat Reader cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.0:::::::* cpe:2.3:a:adobe:acrobat_reader:9:::::::* cpe:2.3:a:adobe:acrobat_reader:8.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.6:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.4:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:::::: cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1::windows::::: cpe:2.3:a:adobe:acrobat_reader:8.0:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.0:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.9:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.8:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.7:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.4:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.4:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.4::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.3::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.2::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.1::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0::reader_extensions::::: cpe:2.3:a:adobe:acrobat_reader:6.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.1:::::::* cpe:2.3:a:adobe:acrobat_reader:5.1::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0.9:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.9::unix::::: cpe:2.3:a:adobe:acrobat_reader:5.0.7:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.5::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0.11:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.10:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.10::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.5:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5c:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5c::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0.5a:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5a::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:3.02:::::::* cpe:2.3:a:adobe:acrobat_reader:3.01:::::::* cpe:2.3:a:adobe:acrobat_reader:3.0:::::::* cpe:2.3:a:adobe:acrobat_reader:3.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:::::::: cpe:2.3:a:adobe:acrobat_reader:::::classic:::*	79
Application	Adobe Reader cpe:2.3:a:adobe:reader:9.1:::::::* cpe:2.3:a:adobe:reader:8.1.4:::::::*	2

SAINT Exploits

Description	Link
Adobe Reader Javascript API getAnnots method vulnerability	More info here
Adobe Reader Javascript API spell.customDictonaryOpen memory corruption	More info here

OpenVAS Exploits

Date	Description
2010-04-07	Name : Adobe Reader PDF Handling Code Execution Vulnerability (Win) File : nvt/gb_adobe_reader_exe_code_exec_vuln_win.nasl
2009-10-13	Name : Solaris Update for Adobe Acrobat Reader 121104-10 File : nvt/gb_solaris_121104_10.nasl
2009-09-09	Name : SuSE Security Summary SUSE-SR:2009:014 File : nvt/suse_sr_2009_014.nasl
2009-07-29	Name : Gentoo Security Advisory GLSA 200907-06 (acroread) File : nvt/glsa_200907_06.nasl
2009-07-06	Name : SuSE Security Advisory SUSE-SA:2009:035 (acroread) File : nvt/suse_sa_2009_035.nasl
2009-07-06	Name : SuSE Security Summary SUSE-SR:2009:012 File : nvt/suse_sr_2009_012.nasl
2009-06-23	Name : RedHat Security Advisory RHSA-2009:1109 File : nvt/RHSA_2009_1109.nasl
2009-06-16	Name : Adobe Reader Multiple BOF Vulnerabilities - Jun09 (Linux) File : nvt/gb_adobe_prdts_mult_bof_vuln_jun09_lin.nasl
2009-06-16	Name : Adobe Reader/Acrobat Multiple BOF Vulnerabilities - Jun09 (Win) File : nvt/gb_adobe_prdts_mult_bof_vuln_jun09_win.nasl
2009-06-15	Name : SuSE Security Summary SUSE-SR:2009:011 File : nvt/suse_sr_2009_011.nasl
2009-05-25	Name : SuSE Security Advisory SUSE-SA:2009:027 (acroread) File : nvt/suse_sa_2009_027.nasl
2009-05-20	Name : RedHat Security Advisory RHSA-2009:0478 File : nvt/RHSA_2009_0478.nasl
2009-05-11	Name : Adobe Reader Denial of Service Vulnerability (May09) File : nvt/gb_adobe_reader_dos_vuln_may09_lin.nasl
2009-05-11	Name : Adobe Reader/Acrobat Denial of Service Vulnerability (May09) File : nvt/gb_adobe_reader_dos_vuln_may09_win.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
56119	Adobe Reader / Acrobat Multiple Unspecified Issues (Internal)
56118	Adobe Reader / Acrobat PDF File JPX (aka JPEG2000) Stream Handling Multiple O...
56117	Adobe Reader / Acrobat Unspecified Memory Corruption
56116	Adobe Reader / Acrobat JBIG2 Filter Unspecified Memory Corruption
56115	Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0512)
56114	Adobe Reader / Acrobat PDF File TrueType Font Handling Memory Corruption
56113	Adobe Reader / Acrobat PDF File FlateDecode Filter Parameter Handling Unspeci...
56112	Adobe Reader / Acrobat U3D Model Crafted Extension Block Handling Overflow
56111	Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0889)
56110	Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0888)
56109	Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0511)
56108	Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0510)
56107	Adobe Reader / Acrobat JBIG2 Filter Crafted File Handling Unspecified Overflow
56106	Adobe Reader / Acrobat JBIG2 Filter Huffman Encoded Text Region Segment Handl...
54130	Adobe Reader getAnnots() JavaScript Method PDF Handling Memory Corruption A memory corruption flaw exists in Adobe and Acrobat Reader. The getAnnots() JavaScript method fails to validate input read from a malformed PDF file resulting in memory corruption. With a specially crafted file, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.
54129	Adobe Reader customDictionaryOpen() JavaScript Method PDF Handling Memory Cor...

Snort® IPS/IDS

Date	Description
2018-02-06	Adobe Acrobat Reader getAnnots exploit attempt RuleID : 45369 - Revision : 1 - Type : FILE-PDF
2016-07-01	Adobe Acrobat Reader getAnnots exploit attempt RuleID : 39109 - Revision : 2 - Type : FILE-PDF
2016-07-01	Adobe Acrobat Reader getAnnots exploit attempt RuleID : 39108 - Revision : 2 - Type : FILE-PDF
2016-03-22	Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 37712 - Revision : 1 - Type : FILE-PDF
2014-01-10	Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 28626 - Revision : 8 - Type : FILE-PDF
2014-01-10	Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 28303 - Revision : 7 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader JPX malformed code-block width memory corruption attempt RuleID : 25767 - Revision : 6 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader FlateDecode integer overflow attempt RuleID : 25588 - Revision : 5 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader getAnnots exploit attempt RuleID : 23504 - Revision : 8 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader spell.customDictionaryOpen exploit attempt RuleID : 23500 - Revision : 5 - Type : FILE-PDF
2014-01-10	Adobe RoboHelp Server Arbitrary File Upload and Execute RuleID : 17529 - Revision : 10 - Type : SERVER-WEBAPP
2014-01-10	Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 17526 - Revision : 14 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader FlateDecode integer overflow attempt RuleID : 15709 - Revision : 19 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader JPX malformed code-block width memory corruption attempt RuleID : 15562 - Revision : 14 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader getAnnots exploit attempt RuleID : 15493 - Revision : 15 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader spell.customDictionaryOpen exploit attempt RuleID : 15492 - Revision : 15 - Type : FILE-PDF

Nessus® Vulnerability Scanner

Date	Description
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6398.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6264.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6331.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6260.nasl - Type : ACT_GATHER_INFO
2009-10-06	Name : The remote openSUSE host is missing a security update. File : suse_acroread-6332.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-090806.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-090519.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread-090701.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread-090519.nasl - Type : ACT_GATHER_INFO
2009-08-28	Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_912.nasl - Type : ACT_GATHER_INFO
2009-08-28	Name : The version of Adobe Acrobat on the remote Windows host is affected by a memo... File : adobe_acrobat_911.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1109.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0478.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-090701.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-090519.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-090701.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-090519.nasl - Type : ACT_GATHER_INFO
2009-07-13	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200907-06.nasl - Type : ACT_GATHER_INFO
2009-06-11	Name : The PDF file viewer on the remote Windows host is affected by multiple vulner... File : adobe_reader_912.nasl - Type : ACT_GATHER_INFO
2009-05-22	Name : The remote openSUSE host is missing a security update. File : suse_acroread-6258.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The PDF file viewer on the remote Windows host is affected by a memory corrup... File : adobe_reader_911.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:36:35	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	15
Oval ID(s)	2
CPE ID(s)	203
Saint Exploit(s)	2
osvdb(s)	16
Openvas Exploit(s)	14
Snort® Rule(s)	16
Nessus® Exploit(s)	21

	Related
10	CVE-2009-2028
9.3	CVE-2009-1861
9.3	CVE-2009-1859
9.3	CVE-2009-1858
9.3	CVE-2009-1857
9.3	CVE-2009-1856
9.3	CVE-2009-1855
9.3	CVE-2009-1492
9.3	CVE-2009-0889
9.3	CVE-2009-0888
9.3	CVE-2009-0512
9.3	CVE-2009-0511
9.3	CVE-2009-0510
9.3	CVE-2009-0509
9.3	CVE-2009-0198
6.8	CVE-2009-1493
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 16 more Alert(s)