9.3
CVSSv2

CVE-2009-1856

Published: 11/06/2009 Updated: 17/08/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in Adobe Reader 7 and Acrobat 7 prior to 7.1.3, Adobe Reader 8 and Acrobat 8 prior to 8.1.6, and Adobe Reader 9 and Acrobat 9 prior to 9.1.2 allows malicious users to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

adobe acrobat reader 7.0

adobe acrobat 7.0

adobe acrobat 7.0.3

adobe acrobat 7.0.6

adobe acrobat 7.0.8

adobe acrobat reader 9

adobe acrobat 9

adobe acrobat 8.1.1

adobe acrobat 8.1.2

adobe acrobat 7.1.1

adobe acrobat 9.0

adobe acrobat 9.1

adobe acrobat reader 8.1.5

adobe acrobat reader 8.1.2

adobe acrobat reader 7.0.2

adobe acrobat reader 7.0.3

adobe acrobat 8.0

adobe acrobat 7.0.2

adobe acrobat 7.0.5

adobe acrobat reader 8.0

adobe acrobat 8.1

adobe acrobat reader 8.1.3

adobe acrobat reader 8.1.4

adobe acrobat reader 9.1

adobe acrobat reader 7.0.1

adobe acrobat reader 7.0.8

adobe acrobat reader 7.0.9

adobe acrobat reader 7.1.1

adobe acrobat 7.1

adobe acrobat 7.0.1

adobe acrobat 7.0.4

adobe acrobat 7.0.7

adobe acrobat 7.0.9

adobe acrobat 9.0.0

adobe acrobat 8.1.3

adobe acrobat 8.1.4

adobe acrobat reader 8.1.1

adobe acrobat reader 8.1

adobe acrobat reader 7.0.4

adobe acrobat reader 7.0.5

adobe acrobat 7.1.0

adobe acrobat reader 9.1.1

adobe acrobat reader 7.1

adobe acrobat reader 7.0.6

adobe acrobat reader 7.0.7

Vendor Advisories

Synopsis Critical: acroread security update Type/Severity Security Advisory: Critical Topic Updated acroread packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4Extras, and Red Hat Enterprise Linux 5 SupplementaryThis update has been ...