PT-2009-2878

CVE-2009-0198

·

Published

2009-06-11

·

Updated

2018-10-11

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Reader versions 7.0 through 7.1.2 Adobe Reader versions 8.0 through 8.1.5 Adobe Reader versions 9.0 through 9.1.1 Adobe Acrobat versions 7.0 through 7.1.2 Adobe Acrobat versions 8.0 through 8.1.5 Adobe Acrobat versions 9.0 through 9.1.1
Description The issue is related to a heap-based buffer overflow in the JBIG2 filter, which can be triggered by a crafted PDF file containing JBIG2 text region segments with Huffman encoding. This can lead to memory corruption, causing a denial of service, or potentially allow remote attackers to execute arbitrary code.
Recommendations For Adobe Reader versions 7.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Reader versions 8.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Reader versions 9.0 through 9.1.1, update to version 9.1.2 or later. For Adobe Acrobat versions 7.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Acrobat versions 8.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Acrobat versions 9.0 through 9.1.1, update to version 9.1.2 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
RHSA-2009:1109
Found an issue in the description? Have something to add? Feel free to write us 👾