vendor:
Adobe Reader
by:
natron, xort, redsand, MC, Didier Stevens
7.8
CVSS
HIGH
Heap-based pointer corruption
CWE
Product Name: Adobe Reader
Affected Version From: Adobe Reader 9.0.0
Affected Version To: Adobe Reader 9.0.0 and earlier
Patch Exists: YES
Related CWE: CVE-2009-0658
CPE: a:adobe:reader:9.0.0
Metasploit:
https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-0376/, https://www.rapid7.com/db/vulnerabilities/adobe-reader-apsb09-04-CVE-2009-0927/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0927/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-0927/, https://www.rapid7.com/db/vulnerabilities/adobe-reader-unspec-js-vuln/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-0658/, https://www.rapid7.com/db/vulnerabilities/adobe-reader-apsb09-03-CVE-2009-0658/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0658/, https://www.rapid7.com/db/vulnerabilities/adobe-reader-apsb09-04-CVE-2009-0658/
Platforms Tested: Windows XP SP3 English, Windows XP SP2 English
2009
Adobe JBIG2Decode Memory Corruption Exploit
This module exploits a heap-based pointer corruption flaw in Adobe Reader 9.0.0 and earlier. This module relies upon javascript for the heap spray.
Mitigation:
Apply the latest security patches and updates from Adobe.