Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
BID:36694
Info
Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
| Bugtraq ID: | 36694 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-2995 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2009 12:00AM |
| Updated: | Oct 26 2009 10:08PM |
| Credit: | Tielei Wang from ICST-ERCIS |
| Vulnerable: |
Sun Solaris 10.0 Gentoo Linux Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.4 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.4 Adobe Acrobat Professional 7.1.3 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 Adobe Acrobat 9.1.1 |
| Not Vulnerable: |
Adobe Acrobat Standard 9.2 Adobe Acrobat Professional 9.2 |
Discussion
Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
Adobe Acrobat is prone to a remote denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash.
Versions *prior to* Acrobat 7.1.4, 8.1.7, and 9.2 are affected.
This issue was previously covered in BID 36638 (Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities), but has been given its own record to better document it.
Adobe Acrobat is prone to a remote denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash.
Versions *prior to* Acrobat 7.1.4, 8.1.7, and 9.2 are affected.
This issue was previously covered in BID 36638 (Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities), but has been given its own record to better document it.
Exploit / POC
Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
An attacker can exploit this issue by tricking unsuspecting victims into opening a malicious file.
An attacker can exploit this issue by tricking unsuspecting victims into opening a malicious file.
Solution / Fix
Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
References:
References: