Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-4324
HistoryDec 15, 2009 - 12:00 a.m.

CVE-2009-4324

2009-12-1500:00:00
ubuntu.com
ubuntu.com
18

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%

JSON

Use-after-free vulnerability in the Doc.media.newPlayer method in
Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before
8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary
code via a crafted PDF file using ZLib compressed streams, as exploited in
the wild in December 2009.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchacroread< 9.3.1-1hardy2UNKNOWN
ubuntu8.10noarchacroread< 9.3.1-1intrepid1UNKNOWN
ubuntu9.04noarchacroread< 9.3.1-1jaunty1UNKNOWN
ubuntu9.10noarchacroread< 9.3.1-1karmic1UNKNOWN

Related

exploitdb 3
packetstorm 3
checkpoint_advisories 3
openvas 8
seebug 4
prion 1
cvelist 1
nvd 1
cve 1
cert 1
saint 4
cisa_kev 1
attackerkb 1
zdt 1
canvas 1
threatpost 3
exploitpack 1
metasploit 2
redhat 3
nessus 15
securityvulns 2
suse 1
gentoo 1
exploitdb
exploitdb
Adobe Reader / Acrobat - &#039;.PDF&#039; File Overflow
2009-12-23 00:00:00
Adobe - &#039;Doc.media.newPlayer&#039; Use-After-Free (Metasploit) (1)
2010-04-30 00:00:00
Adobe - &#039;Doc.media.newPlayer&#039; Use-After-Free (Metasploit) (2)
2010-09-25 00:00:00
packetstorm
packetstorm
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Reader / Acrobat Use-After-Free Calc.exe
2009-12-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader and Acrobat media.newPlayer Code Execution - Ver2 (CVE-2009-4324)
2014-03-03 00:00:00
Protection against Adobe Reader and Acrobat Doc.media.newPlayer Memory Corruption Vulnerability (APSA09-07)
2009-12-16 00:00:00
Adobe Reader and Acrobat media.newPlayer Code Execution (CVE-2009-4324)
2010-01-31 00:00:00
openvas
openvas
Adobe Reader/Acrobat Multimedia Doc.media.newPlayer Code Execution Vulnerability - Windows
2009-12-21 00:00:00
Adobe Reader Multimeda Doc.media.newPlayer RCE Vulnerability - Linux
2009-12-21 00:00:00
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
seebug
seebug
Adobe Reader and Acrobat
2014-07-01 00:00:00
Adobe Reader和Acrobat newplayer() JavaScript方式内存破坏漏洞
2009-12-23 00:00:00
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
prion
prion
Design/Logic Flaw
2009-12-15 02:30:00
cvelist
cvelist
CVE-2009-4324
2009-12-15 02:00:00
nvd
nvd
CVE-2009-4324
2009-12-15 02:30:00
cve
cve
CVE-2009-4324
2009-12-15 02:30:00
cert
cert
Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method
2009-12-15 00:00:00
saint
saint
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
cisa_kev
cisa_kev
Adobe Acrobat and Reader Use-After-Free Vulnerability
2022-06-08 00:00:00
attackerkb
attackerkb
CVE-2009-4324
2009-12-15 00:00:00
zdt
zdt
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
canvas
canvas
Immunity Canvas: ACROBAT_NEWPLAYER
2009-12-15 02:30:00
threatpost
threatpost
Attackers Targeting Unpatched Adobe Flaws
2009-12-15 14:26:19
Main PHP-Nuke Site Compromised
2010-05-07 15:37:38
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
exploitpack
exploitpack
Adobe Reader Acrobat - .PDF File Overflow
2009-12-23 00:00:00
metasploit
metasploit
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-15 20:15:08
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-16 20:37:57
redhat
redhat
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
nessus
nessus
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
securityvulns
securityvulns
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
suse
suse
remote code execution in acroread
2010-01-26 16:40:23
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%

JSON
Related for UB:CVE-2009-4324
exploitdb3packetstorm3checkpoint_advisories3openvas8seebug4prion1cvelist1nvd1cve1cert1saint4cisa_kev1attackerkb1zdt1canvas1threatpost3exploitpack1metasploit2redhat3nessus15securityvulns2suse1gentoo1