Detections
Analytics
Adobe Reader < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
critical Nessus Plugin ID 35821
Language:
Synopsis
The PDF file viewer on the remote Windows host is affected by multiple vulnerabilities.Description
The version of Adobe Reader installed on the remote host is earlier than 9.1 / 8.1.4 / 7.1.1. Such versions are reportedly affected by multiple vulnerabilities :- An integer buffer overflow can be triggered when processing a malformed JBIG2 image stream with the '/JBIG2Decode' filter. (CVE-2009-0658)
- A vulnerability in the 'getIcon()' JavaScript method of a Collab object could allow for remote code execution. (CVE-2009-0927)
- Additional vulnerabilities involving handling of JBIG2 image streams could lead to remote code execution.
(CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062)
If an attacker can trick a user into opening a specially crafted PDF file, these flaws can exploited to execute arbitrary code subject to the user's privileges.
Solution
Upgrade to Adobe Reader 9.1 / 8.1.4 / 7.1.1 or later.See Also
https://www.tenable.com/security/research/tra-2009-01
https://www.adobe.com/support/security/bulletins/apsb09-03.html
http://www.adobe.com/support/security/bulletins/apsb09-04.html
Plugin Details
Severity: Critical
ID: 35821
File Name: adobe_reader_91.nasl
Version: 1.32
Type: local
Agent: windows
Family: Windows
Published: 3/11/2009
Updated: 3/28/2022
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.6
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2009-0928
Vulnerability Information
CPE: cpe:/a:adobe:acrobat_reader
Required KB Items: SMB/Acroread/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/10/2009
CISA Known Exploited Vulnerability Due Dates: 4/15/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Adobe Collab.getIcon() Buffer Overflow)
Reference Information
CVE: CVE-2009-0193, CVE-2009-0658, CVE-2009-0927, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062