Lucene search
SAINT CorporationSAINT:27B118A705BF0E7C072084CE0B752797HistoryDec 23, 2009 - 12:00 a.m.
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-2300:00:00
SAINT Corporation
download.saintcorporation.com
28
EPSS
0.97
Percentile
99.8%
Added: 12/23/2009
CVE: CVE-2009-4324
BID: 37331
OSVDB: 60980
Background
Adobe Reader is free software for viewing PDF documents.
Problem
This issue is caused by a use-after-free error within the “Doc.Media.newPlayer()” JavaScript function, which could be exploited by attackers to execute arbitrary code by tricking a user into opening a specially crafted PDF file.
Resolution
Follow instructions in APSB09-07.
References
<http://secunia.com/advisories/37690>
Limitations
Exploit works on Adobe Reader 9.2.
The user must open the exploit file in Adobe Reader and click on the square image box.
Platforms
Windows
Related
packetstorm
packetstorm
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Reader / Acrobat Use-After-Free Calc.exe
2009-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2009-4324
2009-12-15 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitdb
exploitdb
Adobe Reader / Acrobat - '.PDF' File Overflow
2009-12-23 00:00:00
Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (1)
2010-04-30 00:00:00
Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (2)
2010-09-25 00:00:00
saint
saint
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
seebug
seebug
Adobe Reader/Acrobat 'newplayer()' JavaScript方法远程代码执行漏洞
2009-12-17 00:00:00
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
Adobe Reader和Acrobat newplayer() JavaScript方式内存破坏漏洞
2009-12-23 00:00:00
attackerkb
attackerkb
CVE-2009-4324
2009-12-15 00:00:00
cisa_kev
cisa_kev
Adobe Acrobat and Reader Use-After-Free Vulnerability
2022-06-08 00:00:00
cve
cve
CVE-2009-4324
2009-12-15 02:30:00
cert
cert
openvas
openvas
Adobe Reader/Acrobat Multimedia Doc.media.newPlayer Code Execution Vulnerability - Windows
2009-12-21 00:00:00
Adobe Reader Multimeda Doc.media.newPlayer RCE Vulnerability - Linux
2009-12-21 00:00:00
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
prion
prion
Design/Logic Flaw
2009-12-15 02:30:00
cvelist
cvelist
CVE-2009-4324
2009-12-15 02:00:00
nvd
nvd
CVE-2009-4324
2009-12-15 02:30:00
canvas
canvas
Immunity Canvas: ACROBAT_NEWPLAYER
2009-12-15 02:30:00
threatpost
threatpost
Attackers Targeting Unpatched Adobe Flaws
2009-12-15 14:26:19
Main PHP-Nuke Site Compromised
2010-05-07 15:37:38
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
exploitpack
exploitpack
Adobe Reader Acrobat - .PDF File Overflow
2009-12-23 00:00:00
metasploit
metasploit
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-15 20:15:08
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-16 20:37:57
zdt
zdt
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
nessus
nessus
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
redhat
redhat
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
suse
suse
remote code execution in acroread
2010-01-26 16:40:23
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00