Lucene search

[email protected]NVD:CVE-2009-0928

HistoryMar 25, 2009 - 1:30 a.m.

CVE-2009-0928

2009-03-2501:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.561

Percentile

97.7%

JSON

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

Affected configurations

Nvd

Node

adobeacrobatRange≤9.0

adobeacrobatMatch3.0

adobeacrobatMatch3.1

adobeacrobatMatch4.0

adobeacrobatMatch4.0.5

adobeacrobatMatch4.0.5a

adobeacrobatMatch4.0.5c

adobeacrobatMatch5.0

adobeacrobatMatch5.0.5

adobeacrobatMatch5.0.6

adobeacrobatMatch5.0.10

adobeacrobatMatch6.0

adobeacrobatMatch6.0.1

adobeacrobatMatch6.0.2

adobeacrobatMatch6.0.3

adobeacrobatMatch6.0.4

adobeacrobatMatch6.0.5

adobeacrobatMatch6.0.6

adobeacrobatMatch7.0

adobeacrobatMatch7.0.1

adobeacrobatMatch7.0.2

adobeacrobatMatch7.0.3

adobeacrobatMatch7.0.4

adobeacrobatMatch7.0.5

adobeacrobatMatch7.0.6

adobeacrobatMatch7.0.7

adobeacrobatMatch7.0.8

adobeacrobatMatch7.0.9

adobeacrobatMatch7.1.0

adobeacrobatMatch7.1.1

adobeacrobatMatch7.1.2

adobeacrobatMatch7.1.3

adobeacrobatMatch7.1.4

adobeacrobatMatch8.0

adobeacrobatMatch8.1

adobeacrobatMatch8.1.1

adobeacrobatMatch8.1.2

adobeacrobatMatch8.1.3

adobeacrobatMatch8.1.4

adobeacrobatMatch8.1.5

adobeacrobatMatch8.1.6

adobeacrobatMatch8.1.7

adobeacrobatMatch8.2

adobeacrobatMatch8.2.1

adobeacrobatMatch8.2.2

adobeacrobatMatch8.2.3

adobeacrobatMatch8.2.4

Node

adobeacrobat_readerRange≤9.0

adobeacrobat_readerMatch3.0

adobeacrobat_readerMatch3.01

adobeacrobat_readerMatch3.02

adobeacrobat_readerMatch4.0

adobeacrobat_readerMatch4.0.5

adobeacrobat_readerMatch4.0.5a

adobeacrobat_readerMatch4.0.5c

adobeacrobat_readerMatch4.5

adobeacrobat_readerMatch5.0

adobeacrobat_readerMatch5.0.5

adobeacrobat_readerMatch5.0.6

adobeacrobat_readerMatch5.0.7

adobeacrobat_readerMatch5.0.9

adobeacrobat_readerMatch5.0.10

adobeacrobat_readerMatch5.0.11

adobeacrobat_readerMatch5.1

adobeacrobat_readerMatch6.0

adobeacrobat_readerMatch6.0.1

adobeacrobat_readerMatch6.0.2

adobeacrobat_readerMatch6.0.3

adobeacrobat_readerMatch6.0.4

adobeacrobat_readerMatch6.0.5

adobeacrobat_readerMatch6.0.6

adobeacrobat_readerMatch7.0

adobeacrobat_readerMatch7.0.1

adobeacrobat_readerMatch7.0.2

adobeacrobat_readerMatch7.0.3

adobeacrobat_readerMatch7.0.4

adobeacrobat_readerMatch7.0.5

adobeacrobat_readerMatch7.0.6

adobeacrobat_readerMatch7.0.7

adobeacrobat_readerMatch7.0.8

adobeacrobat_readerMatch7.0.9

adobeacrobat_readerMatch7.1.0

adobeacrobat_readerMatch7.1.1

adobeacrobat_readerMatch7.1.2

adobeacrobat_readerMatch7.1.3

adobeacrobat_readerMatch7.1.4

adobeacrobat_readerMatch8.0

adobeacrobat_readerMatch8.1

adobeacrobat_readerMatch8.1.1

adobeacrobat_readerMatch8.1.2

adobeacrobat_readerMatch8.1.4

adobeacrobat_readerMatch8.1.5

adobeacrobat_readerMatch8.1.6

adobeacrobat_readerMatch8.1.7

adobeacrobat_readerMatch8.2

adobeacrobat_readerMatch8.2.1

adobeacrobat_readerMatch8.2.2

adobeacrobat_readerMatch8.2.3

adobeacrobat_readerMatch8.2.4

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=776

lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html

lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

secunia.com/advisories/34392

secunia.com/advisories/34490

secunia.com/advisories/34706

secunia.com/advisories/34790

security.gentoo.org/glsa/glsa-200904-17.xml

sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1

www.adobe.com/support/security/bulletins/apsb09-04.html

www.redhat.com/support/errata/RHSA-2009-0376.html

www.securityfocus.com/bid/34229

www.securitytracker.com/id?1021892

www.vupen.com/english/advisories/2009/1019

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.561

Percentile

97.7%

JSON

Related for NVD:CVE-2009-0928

cve1 prion1 ubuntucve1 cvelist1 securityvulns1 seebug1 openvas11 redhat1 nessus11 gentoo1 suse1