Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-3459

Опубликовано: 13 окт. 2009
Источник: nvd
CVSS2: 9.3
EPSS Высокий

Описание

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Версия до 9.1.3 (включая)
cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Версия до 9.0 (включая)
cpe:2.3:a:adobe:reader:3.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:4.0.5a:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:4.0.5c:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:4.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:5.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:7.1.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:9.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:9.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:reader:9.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 99%
0.88364
Высокий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu логотип

CVE-2009-3459

ubuntu
около 16 лет назад

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

redhat логотип

CVE-2009-3459

redhat
около 16 лет назад

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

github логотип

GHSA-q52p-3m33-w676

github
больше 3 лет назад

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 99%
0.88364
Высокий

9.3 Critical

CVSS2

Дефекты

CWE-119