CVE-2009-0889 Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote...
HighCVSS 9.3
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 7.0 | No fix listed |
| Adobe acrobat | = 7.0.1 | No fix listed |
| Adobe acrobat | = 7.0.2 | No fix listed |
| Adobe acrobat | = 7.0.3 | No fix listed |
| Adobe acrobat | = 7.0.4 | No fix listed |
| Adobe acrobat | = 7.0.5 | No fix listed |
| Adobe acrobat | = 7.0.6 | No fix listed |
| Adobe acrobat | = 7.0.7 | No fix listed |
| Adobe acrobat | = 7.0.8 | No fix listed |
| Adobe acrobat | = 7.0.9 | No fix listed |
| Adobe acrobat | = 7.1 | No fix listed |
| Adobe acrobat | = 7.1.0 | No fix listed |
| Adobe acrobat | = 7.1.1 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.2-security_update | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 9 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.0.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 7.0.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0.2 | No fix listed |
| Adobe Acrobat Reader | = 7.0.3 | No fix listed |
| Adobe Acrobat Reader | = 7.0.4 | No fix listed |
| Adobe Acrobat Reader | = 7.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0.6 | No fix listed |
| Adobe Acrobat Reader | = 7.0.7 | No fix listed |
| Adobe Acrobat Reader | = 7.0.8 | No fix listed |
| Adobe Acrobat Reader | = 7.0.9 | No fix listed |
| Adobe Acrobat Reader | = 7.1 | No fix listed |
| Adobe Acrobat Reader | = 7.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2-security_update | No fix listed |
| Adobe Acrobat Reader | = 8.1.3 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 9 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
References
- 34580 third-party-advisory vendor-advisory
- 35496 third-party-advisory
- 35734 third-party-advisory
- GLSA-200907-06 vendor-advisory
- 1022361 vdb-entry
- www.adobe.com patch vendor-advisory
- RHSA-2009:1109 vendor-advisory
- 35274 vdb-entry
- TA09-161A third-party-advisory us-government-resource
- ADV-2009-1547 patch vdb-entry vendor-advisory