Lucene search

[email protected]NVD:CVE-2009-3955

HistoryJan 13, 2010 - 7:30 p.m.

CVE-2009-3955

2010-01-1319:30:00

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.654

Percentile

98.0%

JSON

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.

Affected configurations

Nvd

Node

adobeacrobatRange≤9.2

adobeacrobatMatch3.0

adobeacrobatMatch3.1

adobeacrobatMatch4.0

adobeacrobatMatch4.0.5

adobeacrobatMatch4.0.5a

adobeacrobatMatch4.0.5c

adobeacrobatMatch5.0

adobeacrobatMatch5.0.5

adobeacrobatMatch5.0.6

adobeacrobatMatch5.0.10

adobeacrobatMatch6.0

adobeacrobatMatch6.0.1

adobeacrobatMatch6.0.2

adobeacrobatMatch6.0.3

adobeacrobatMatch6.0.4

adobeacrobatMatch6.0.5

adobeacrobatMatch6.0.6

adobeacrobatMatch7.0

adobeacrobatMatch7.0.1

adobeacrobatMatch7.0.2

adobeacrobatMatch7.0.3

adobeacrobatMatch7.0.4

adobeacrobatMatch7.0.5

adobeacrobatMatch7.0.6

adobeacrobatMatch7.0.7

adobeacrobatMatch7.0.8

adobeacrobatMatch7.0.9

adobeacrobatMatch7.1.0

adobeacrobatMatch7.1.1

adobeacrobatMatch7.1.2

adobeacrobatMatch7.1.3

adobeacrobatMatch7.1.4

adobeacrobatMatch8.0

adobeacrobatMatch8.1

adobeacrobatMatch8.1.1

adobeacrobatMatch8.1.2

adobeacrobatMatch8.1.3

adobeacrobatMatch8.1.4

adobeacrobatMatch8.1.5

adobeacrobatMatch8.1.6

adobeacrobatMatch8.1.7

adobeacrobatMatch9.0

adobeacrobatMatch9.1

adobeacrobatMatch9.1.1

adobeacrobatMatch9.1.2

adobeacrobatMatch9.1.3

AND

applemac_os_x

microsoftwindows

Node

adobeacrobat_readerRange≤9.2

adobeacrobat_readerMatch3.0

adobeacrobat_readerMatch3.01

adobeacrobat_readerMatch3.02

adobeacrobat_readerMatch4.0

adobeacrobat_readerMatch4.0.5

adobeacrobat_readerMatch4.0.5a

adobeacrobat_readerMatch4.0.5c

adobeacrobat_readerMatch4.5

adobeacrobat_readerMatch5.0

adobeacrobat_readerMatch5.0.5

adobeacrobat_readerMatch5.0.6

adobeacrobat_readerMatch5.0.7

adobeacrobat_readerMatch5.0.9

adobeacrobat_readerMatch5.0.10

adobeacrobat_readerMatch5.0.11

adobeacrobat_readerMatch5.1

adobeacrobat_readerMatch6.0

adobeacrobat_readerMatch6.0.1

adobeacrobat_readerMatch6.0.2

adobeacrobat_readerMatch6.0.3

adobeacrobat_readerMatch6.0.4

adobeacrobat_readerMatch6.0.5

adobeacrobat_readerMatch7.0

adobeacrobat_readerMatch7.0.1

adobeacrobat_readerMatch7.0.2

adobeacrobat_readerMatch7.0.3

adobeacrobat_readerMatch7.0.4

adobeacrobat_readerMatch7.0.5

adobeacrobat_readerMatch7.0.6

adobeacrobat_readerMatch7.0.7

adobeacrobat_readerMatch7.0.8

adobeacrobat_readerMatch7.0.9

adobeacrobat_readerMatch7.1.0

adobeacrobat_readerMatch7.1.1

adobeacrobat_readerMatch7.1.2

adobeacrobat_readerMatch7.1.3

adobeacrobat_readerMatch8.0

adobeacrobat_readerMatch8.1

adobeacrobat_readerMatch8.1.1

adobeacrobat_readerMatch8.1.2

adobeacrobat_readerMatch8.1.4

adobeacrobat_readerMatch8.1.5

adobeacrobat_readerMatch8.1.6

adobeacrobat_readerMatch8.1.7

adobeacrobat_readerMatch9.0

adobeacrobat_readerMatch9.1

adobeacrobat_readerMatch9.1.1

adobeacrobat_readerMatch9.1.2

adobeacrobat_readerMatch9.1.3

AND

applemac_os_x

microsoftwindows

VendorProductVersionCPE
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
adobeacrobat3.0cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*
adobeacrobat3.1cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*
adobeacrobat4.0cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*
adobeacrobat4.0.5cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*
adobeacrobat4.0.5acpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*
adobeacrobat4.0.5ccpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*
adobeacrobat5.0cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*
adobeacrobat5.0.5cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*
adobeacrobat5.0.6cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::::::::
adobe	acrobat	3.0	cpe:2.3:a:adobe:acrobat:3.0:::::::*
adobe	acrobat	3.1	cpe:2.3:a:adobe:acrobat:3.1:::::::*
adobe	acrobat	4.0	cpe:2.3:a:adobe:acrobat:4.0:::::::*
adobe	acrobat	4.0.5	cpe:2.3:a:adobe:acrobat:4.0.5:::::::*
adobe	acrobat	4.0.5a	cpe:2.3:a:adobe:acrobat:4.0.5a:::::::*
adobe	acrobat	4.0.5c	cpe:2.3:a:adobe:acrobat:4.0.5c:::::::*
adobe	acrobat	5.0	cpe:2.3:a:adobe:acrobat:5.0:::::::*
adobe	acrobat	5.0.5	cpe:2.3:a:adobe:acrobat:5.0.5:::::::*
adobe	acrobat	5.0.6	cpe:2.3:a:adobe:acrobat:5.0.6:::::::*