PT-2009-2878
CVE-2009-0198
·
Publicado
2009-06-11
·
Atualizado
2018-10-11
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Adobe Reader versions 7.0 through 7.1.2
Adobe Reader versions 8.0 through 8.1.5
Adobe Reader versions 9.0 through 9.1.1
Adobe Acrobat versions 7.0 through 7.1.2
Adobe Acrobat versions 8.0 through 8.1.5
Adobe Acrobat versions 9.0 through 9.1.1
Description
The issue is related to a heap-based buffer overflow in the JBIG2 filter, which can be triggered by a crafted PDF file containing JBIG2 text region segments with Huffman encoding. This can lead to memory corruption, causing a denial of service, or potentially allow remote attackers to execute arbitrary code.
Recommendations
For Adobe Reader versions 7.0 through 7.1.2, update to version 7.1.3 or later.
For Adobe Reader versions 8.0 through 8.1.5, update to version 8.1.6 or later.
For Adobe Reader versions 9.0 through 9.1.1, update to version 9.1.2 or later.
For Adobe Acrobat versions 7.0 through 7.1.2, update to version 7.1.3 or later.
For Adobe Acrobat versions 8.0 through 8.1.5, update to version 8.1.6 or later.
For Adobe Acrobat versions 9.0 through 9.1.1, update to version 9.1.2 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾