CVE-2009-1862

Опубликовано: 23 июл. 2009

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Средний

Описание

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

Ссылки

http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html
Broken Link
Vendor Advisory
http://bugs.adobe.com/jira/browse/FP-1265
Broken Link
http://isc.sans.org/diary.html?storyid=6847
Not Applicable
http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
Mailing List
Third Party Advisory
http://news.cnet.com/8301-27080_3-10293389-245.html
Broken Link
http://secunia.com/advisories/36193
Broken Link
http://secunia.com/advisories/36374
Broken Link
http://secunia.com/advisories/36701
Broken Link
http://security.gentoo.org/glsa/glsa-200908-04.xml
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1
Broken Link
http://support.apple.com/kb/HT3864
Third Party Advisory
http://support.apple.com/kb/HT3865
Third Party Advisory
http://www.adobe.com/support/security/advisories/apsa09-03.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb09-10.html
Not Applicable
http://www.adobe.com/support/security/bulletins/apsb09-13.html
Not Applicable
http://www.kb.cert.org/vuls/id/259425
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/35759
Broken Link
Third Party Advisory
VDB Entry
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99
Broken Link
http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

Версия от 9.0 (включая) до 9.1.2 (включая)

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

Версия от 9.0 (включая) до 9.1.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия от 9.0 (включая) до 9.0.159.0 (включая)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.0.22.87 (включая)

EPSS

Процентиль: 98%

0.58566

Средний

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2009-1862

CVSS3: 7.8

ubuntu

больше 16 лет назад

CVE-2009-1862

redhat

больше 16 лет назад

GHSA-wx6p-35hf-vhhj

CVSS3: 7.8

github

почти 4 года назад

EPSS

Процентиль: 98%

0.58566

Средний

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-787