Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NULL pointer dereference) via unspecified vectors.

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. (CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. (CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324)

Acrobat reader was updated to version 9.3 to fix those security issues.

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code (CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324).

Acrobat reader was updated to version 9.3 to fix those security issues.

The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2.  Such versions are reportedly affected by multiple vulnerabilities :

  - A use-after-free vulnerability in 'Multimedia.api' can     lead to code execution. (CVE-2009-4324)

  - An array boundary issue in 'U3D' support can lead to     code execution. (CVE-2009-3953)

  - A DLL-loading vulnerability in '3D' can allow arbitrary     code execution. (CVE-2009-3954)

  - A memory corruption vulnerability can lead to code     execution. (CVE-2009-3955)

  - A script injection vulnerability. (CVE-2009-3956)

  - A NULL pointer dereference vulnerability can lead to a     denial of service. (CVE-2009-3957)

  - A buffer overflow vulnerability in the Download Manager     can lead to code execution. (CVE-2009-3958)

  - An integer overflow vulnerability in 'U3D' support can     lead to code execution. (CVE-2009-3959)

  - A buffer overflow in the 'gp.ocx' ActiveX control can     lead to code execution. (CVE-2010-1278)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3 / 8.2.  Such versions are reportedly affected by multiple vulnerabilities :

  - A use-after-free vulnerability in 'Multimedia.api' can     lead to code execution. (CVE-2009-4324)

  - An array boundary issue in 'U3D' support can lead to     code execution. (CVE-2009-3953)

  - A DLL-loading vulnerability in '3D' can allow arbitrary     code execution. (CVE-2009-3954)

  - A memory corruption vulnerability can lead to code     execution. (CVE-2009-3955)

  - A script injection vulnerability. (CVE-2009-3956)

  - A NULL pointer dereference vulnerability can lead to a     denial of service. (CVE-2009-3957)

  - A buffer overflow vulnerability in the Download Manager     can lead to code execution. (CVE-2009-3958)

  - An integer overflow vulnerability in 'U3D' support can     lead to code execution. (CVE-2009-3959)

  - A buffer overflow in the 'gp.ocx' ActiveX control can     lead to code execution. (CVE-2010-1278)

ID	Name	Product	Family	Severity
51711	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6805)	Nessus	SuSE Local Security Checks	critical
51710	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6804)	Nessus	SuSE Local Security Checks	critical
51696	SuSE 10 Security Update : acroread (ZYPP Patch Number 6803)	Nessus	SuSE Local Security Checks	critical
51695	SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)	Nessus	SuSE Local Security Checks	critical
44377	SuSE 11 Security Update : acroread_ja (SAT Patch Number 1881)	Nessus	SuSE Local Security Checks	critical
44130	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)	Nessus	SuSE Local Security Checks	critical
44128	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
44126	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
44124	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
43876	Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)	Nessus	Windows	critical
43875	Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)	Nessus	Windows	critical

Detections

Analytics

CVE-2009-3957

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical