CVE-2009-3462

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."...

Heap overflow

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors...

CVE-2009-2988

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors...

CVE-2009-2994

Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors...

CVE-2009-2985

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996...

CVE-2009-2997

CVE-2009-2997 is an Adobe Reader/Acrobat U3D heap overflow vulnerability. Multiple SAINT records (e.g., C6D7B175C464FAAED01654B48ACA5121) describe a heap memory corruption due to an input validation error while parsing Universal 3D (U3D) files, specifically in the CLODMeshDeclaration block. Resol...

CVE-2009-2991

Technical details about CVE-2009-2991 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2009-2992

CVE-2009-2992 refers to an unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 that fails to properly validate input, enabling a denial of service via unknown vectors. Connected documents confirm this as a real vulnerability amo...

CVE-2009-2994

CVE-2009-2994 is described in connected advisories as a memory corruption vulnerability in Adobe Reader and Acrobat, caused by an index boundary error when handling U3D/CLODMeshDeclaration data in PDFs. This could allow remote code execution via specially crafted PDF documents. The advisories con...

CVE-2009-2980

CVE-2009-2980 concerns an integer overflow in Adobe Reader/Acrobat across multiple lines of versions (7.x up to 7.1.4, 8.x up to 8.1.7, 9.x up to 9.2) that can lead to denial of service or potentially remote code execution via unspecified vectors. Publicly documented details show affected product...

CVE-2009-2990

Adobe Reader and Adobe Acrobat versions prior to 9.2, 8.1.7, and possibly 7.1.4 are vulnerable to an array index error within the U3D plugin. Specifically, when parsing a U3D CLODProgressiveMeshContinuation block, the software reads a split position index from the input without validation. This i...

CVE-2009-2982

Public technical details (affected products, exact root cause, exploit vectors) for CVE-2009-2982 are not provided in the connected documents. Monitor for forthcoming updates.

CVE-2009-2991

Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2983

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2009-2980

Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2009-2993

The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the 1 Privileged Context and 2 Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and...

CVE-2009-2998

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458...

CVE-2009-2990

Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors...

CVE-2009-3462: Undefined Security Weakness

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."...

In-depth research on the recent PDF zero-day exploit (CVE-2009-3459)

Hi there, Just want to let you know, the Fortinet's FortiGuard Global Security Research Team has provided an in-depth research on the recent PDF zero-day exploit CVE-2009-3459. http://www.fortiguard.com/analysis/pdfanalysis.html "Taking a look back over this 0-day attack as a whole, each single...