Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| CWE ID | Type | Source |
|---|---|---|
| CWE-189 | Primary | nvd@nist.gov |
Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html This update resolves an integer overflow that could potentially lead to code execution. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2989). NOTE: this issue is resolved in the Acrobat 9.2 and 8.1.7 updates.
Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html Solution Acrobat Acrobat Standard and Pro users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows. Acrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows Acrobat 3D users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows. Acrobat Pro users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.
| Hyperlink | Source | Resource |
|---|---|---|
| http://securitytracker.com/id?1023007 | cve@mitre.org | N/A |
| http://www.adobe.com/support/security/bulletins/apsb09-15.html | cve@mitre.org | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/36638 | cve@mitre.org | N/A |
| http://www.us-cert.gov/cas/techalerts/TA09-286B.html | cve@mitre.org | Patch US Government Resource |
| http://www.vupen.com/english/advisories/2009/2898 | cve@mitre.org | Patch Vendor Advisory |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297 | cve@mitre.org | N/A |