CVE-2009-1062

Published: Mar 25, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.

Affected (70)

Products: Adobe: Acrobat, Acrobat Reader, Reader

3 products

Configuration A

70 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 9.0
Adobe Acrobat	Up to 9.0
Adobe Acrobat	Version 7.0.1
Adobe Acrobat	Version 7.0.1
Adobe Acrobat	Version 7.0.2
Adobe Acrobat	Version 7.0.2
Adobe Acrobat	Version 7.0.3
Adobe Acrobat	Version 7.0.3
Adobe Acrobat	Version 7.0.4
Adobe Acrobat	Version 7.0.4
Adobe Acrobat	Version 7.0.5
Adobe Acrobat	Version 7.0.5
Adobe Acrobat	Version 7.0.6
Adobe Acrobat	Version 7.0.6
Adobe Acrobat	Version 7.0.7
Adobe Acrobat	Version 7.0.7
Adobe Acrobat	Version 7.0.8
Adobe Acrobat	Version 7.0.8
Adobe Acrobat	Version 7.0.9
Adobe Acrobat	Version 7.0
Adobe Acrobat	Version 7.0
Adobe Acrobat	Version 7.1.1
Adobe Acrobat	Version 7.1
Adobe Acrobat	Version 7.1
Adobe Acrobat	Version 8.0
Adobe Acrobat	Version 8.0
Adobe Acrobat	Version 8.1.1
Adobe Acrobat	Version 8.1.1
Adobe Acrobat	Version 8.1.2
Adobe Acrobat	Version 8.1.2
Adobe Acrobat	Version 8.1.2 security_update
Adobe Acrobat	Version 8.1.3
Adobe Acrobat	Version 8.1.3
Adobe Acrobat	Version 8.1.4
Adobe Acrobat	Version 8.1.4
Adobe Acrobat	Version 8.1
Adobe Acrobat Reader	Up to 9.0
Adobe Acrobat Reader	Version 7.0
Adobe Reader	Version 3.0
Adobe Reader	Version 4.0.5
Adobe Reader	Version 4.0.5a
Adobe Reader	Version 4.0.5c
Adobe Reader	Version 4.0
Adobe Reader	Version 4.5
Adobe Reader	Version 5.0.10
Adobe Reader	Version 5.0.11
Adobe Reader	Version 5.0.5
Adobe Reader	Version 5.0.6
Adobe Reader	Version 5.0.7
Adobe Reader	Version 5.0.9
Adobe Reader	Version 5.0
Adobe Reader	Version 5.1
Adobe Reader	Version 6.0.1
Adobe Reader	Version 6.0.2
Adobe Reader	Version 6.0.3
Adobe Reader	Version 6.0.4
Adobe Reader	Version 6.0.5
Adobe Reader	Version 6.0
Adobe Reader	Version 7.0.1
Adobe Reader	Version 7.0.2
Adobe Reader	Version 7.0.3
Adobe Reader	Version 7.0.5
Adobe Reader	Version 7.0.7
Adobe Reader	Version 7.0.8
Adobe Reader	Version 7.0.9
Adobe Reader	Version 7.1.0
Adobe Reader	Version 7.1.1
Adobe Reader	Version 8.1.1
Adobe Reader	Version 8.1.2
Adobe Reader	Version 8.1.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: cve@mitre.org

http://secunia.com/advisories/34392

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34490

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34706

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34790

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200904-17.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html

Source: cve@mitre.org

Patch

http://www.redhat.com/support/errata/RHSA-2009-0376.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/34229

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1021892

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1019

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34392

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34490

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34706

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34790

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200904-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.redhat.com/support/errata/RHSA-2009-0376.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34229

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1021892

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1019

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.