CVE-2009-1858

2009-06-1115:30:00

CWE-399

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

jbig2

filter

remote attackers

execute

arbitrary code

memory corruption

cve-2009-1858

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.451 Medium

EPSS

Percentile

97.4%

JSON

The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq9
adobe:acrobat_readeradobe acrobat readereq7.0.9
adobe:acrobatadobe acrobateq8.0
adobe:acrobatadobe acrobateq7.0.6
adobe:acrobatadobe acrobateq8.1.2
adobe:acrobatadobe acrobateq7.1
adobe:acrobatadobe acrobateq8.1.4
adobe:acrobatadobe acrobateq8.1.1
adobe:acrobatadobe acrobateq9.1
adobe:acrobat_readeradobe acrobat readereq7.0.5

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	9
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.9
adobe:acrobat	adobe acrobat	eq	8.0
adobe:acrobat	adobe acrobat	eq	7.0.6
adobe:acrobat	adobe acrobat	eq	8.1.2
adobe:acrobat	adobe acrobat	eq	7.1
adobe:acrobat	adobe acrobat	eq	8.1.4
adobe:acrobat	adobe acrobat	eq	8.1.1
adobe:acrobat	adobe acrobat	eq	9.1
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.5