exploits , vulnerabilities , articles , Adobe Reader and Acrobat Multiple Input Validation Vulnerabilities

Title	Adobe Reader and Acrobat Multiple Input Validation Vulnerabilities
Published	2009-10-13-12:00AM
Updated	2009-10-13-10:48PM
Class	Input Validation Error
CVE	CVE-2009-2993
Remote	Yes
Local	Yes
Credit	Richard van Eeden of IOActive
Vulnerable	Adobe Reader 9.1.2 Adobe Reader 8.1.6 Adobe Reader 7.1.3 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Reader (UNIX) 7.0.1 Adobe Acrobat Reader (UNIX) 7.0 Adobe Acrobat Reader 9.1.3 Adobe Acrobat Reader 9.1.2 Adobe Acrobat Reader 9.1.1 Adobe Acrobat Reader 8.1.6 Adobe Acrobat Reader 8.1.5 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 8.1.3 Adobe Acrobat Reader 8.1.2 Adobe Acrobat Reader 8.1.1 Adobe Acrobat Reader 7.1.2 Adobe Acrobat Reader 7.1.1 Adobe Acrobat Reader 7.0.9 Adobe Acrobat Reader 7.0.9 Adobe Acrobat Reader 7.0.8 Adobe Acrobat Reader 7.0.8 Adobe Acrobat Reader 7.0.7 Adobe Acrobat Reader 7.0.6 Adobe Acrobat Reader 7.0.5 Adobe Acrobat Reader 7.0.4 Adobe Acrobat Reader 7.0.3 Adobe Acrobat Reader 7.0.2 Adobe Acrobat Reader 7.0.1 Adobe Acrobat Reader 7.0 Adobe Acrobat Reader 9.1 Adobe Acrobat Reader 9 Adobe Acrobat Reader 8.1.2 Security Updat Adobe Acrobat Reader 8.1 Adobe Acrobat Reader 8.0 Adobe Acrobat Reader 7.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.3 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 Adobe Acrobat 3D 8.1.3 Adobe Acrobat 3D 8.1.2 Adobe Acrobat 3D 0 Adobe Acrobat 9.1.1 Adobe Acrobat 7.0.3 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0
Not Vulnerable	Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 7.1.4 Adobe Acrobat Standard 9.2 Adobe Acrobat Reader 8.1.7 Adobe Acrobat Reader 7.1.4 Adobe Acrobat Reader 9.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 7.1.4 Adobe Acrobat Professional 9.2
Code	Attackers can use readily available tools to exploit this issue.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
• 2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
• 2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
• 2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
• 2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
• 2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
• 2009-12-17 Drupal Sections Module HTML Injection Vulnerability
• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 21:30:50 +0000