Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-4324

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

Published

2009-12-15T02:30:00.217

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-416
Type: Secondary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	adobe	acrobat	< 8.2	Yes
Application	adobe	acrobat	< 9.3	Yes
Application	adobe	acrobat_reader	< 8.2	Yes
Application	adobe	acrobat_reader	< 9.3	Yes
Operating System	apple	mac_os_x	-	No
Operating System	microsoft	windows	-	No
Application	suse	linux_enterprise_debuginfo	11	Yes
Operating System	opensuse	opensuse	11.1	Yes
Operating System	opensuse	opensuse	11.2	Yes
Operating System	suse	linux_enterprise	10.0	Yes
Operating System	suse	linux_enterprise	10.0	Yes

References

http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html Broken Link, Vendor Advisory ([email protected])
http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html Exploit, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html Mailing List, Third Party Advisory ([email protected])
http://osvdb.org/60980 Broken Link ([email protected])
http://secunia.com/advisories/37690 Broken Link, Vendor Advisory ([email protected])
http://secunia.com/advisories/38138 Broken Link, Vendor Advisory ([email protected])
http://secunia.com/advisories/38215 Broken Link, Vendor Advisory ([email protected])
http://www.adobe.com/support/security/advisories/apsa09-07.html Vendor Advisory ([email protected])
http://www.adobe.com/support/security/bulletins/apsb10-02.html Not Applicable ([email protected])
http://www.kb.cert.org/vuls/id/508357 Third Party Advisory, US Government Resource ([email protected])
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb Broken Link ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0060.html Broken Link ([email protected])
http://www.securityfocus.com/bid/37331 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 Broken Link ([email protected])
http://www.symantec.com/connect/blogs/zero-day-xmas-present Broken Link ([email protected])
http://www.us-cert.gov/cas/techalerts/TA10-013A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2009/3518 Broken Link, Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/0103 Broken Link ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=547799 Issue Tracking ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/54747 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795 Broken Link ([email protected])
http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/60980 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37690 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/38138 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/38215 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.adobe.com/support/security/advisories/apsa09-07.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.adobe.com/support/security/bulletins/apsb10-02.html Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/508357 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0060.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/37331 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/connect/blogs/zero-day-xmas-present Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA10-013A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/3518 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/0103 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=547799 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/54747 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795 Broken Link (af854a3a-2127-422b-91ae-364da2661108)