CVE-2009-1855

CRITICAL 9.3CVE-2009-1855 · Published 11/06/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
acrobat adobe	`= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1= 7.1.0= 7.1.1= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4= 9= 9.0= 9.0.0= 9.1`	No fix yet
acrobat reader adobe	`= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1= 7.1.1= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4= 8.1.5= 9= 9.1= 9.1.1`	No fix yet

Description

Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.

References

lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
secunia.com/advisories/34580 · Vendor Advisory
secunia.com/advisories/35496 · Vendor Advisory
secunia.com/advisories/35655 · Vendor Advisory
secunia.com/advisories/35685 · Vendor Advisory
secunia.com/advisories/35734 · Vendor Advisory
security.gentoo.org/glsa/glsa-200907-06.xml
securitytracker.com/id
adobe.com/support/security/bulletins/apsb09-07.html · Patch
redhat.com/support/errata/RHSA-2009-1109.html
securityfocus.com/archive/1/504229/100/0/threaded
securityfocus.com/bid/35274 · Patch
securityfocus.com/bid/35282 · Patch
us-cert.gov/cas/techalerts/TA09-161A.html · US Government Resource
vupen.com/english/advisories/2009/1547 · Patch
zerodayinitiative.com/advisories/ZDI-09-042

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free