← Back

CVE-2009-3431

nvd nist
Published: Sep 25, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a large number of [ (open square bracket) characters in the argument to the alert method. NOTE: some of these details are obtained from third party information.

Affected (85)

2 products
Acrobat
Acrobat Reader
Configuration A
85 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Version 7.0.1
Version 7.0.1
Version 7.0.1
Version 7.0.2
Version 7.0.2
Version 7.0.2
Version 7.0.3
Version 7.0.3
Version 7.0.3
Version 7.0.4
Version 7.0.4
Version 7.0.4
Version 7.0.5
Version 7.0.5
Version 7.0.5
Version 7.0.6
Version 7.0.6
Version 7.0.6
Version 7.0.7
Version 7.0.7
Version 7.0.7
Version 7.0.8
Version 7.0.8
Version 7.0.8
Version 7.0.8
Version 7.0.9
Version 7.0.9
Version 7.0
Version 7.0
Version 7.0
Version 7.1.0
Version 7.1.1
Version 7.1.1
Version 7.1
Version 7.1
Version 7.1
Version 8.0
Version 8.0
Version 8.0
Version 8.1.1
Version 8.1.1
Version 8.1.1
Version 8.1.2
Version 8.1.2
Version 8.1.2
Version 8.1.2 security_update
Version 8.1.3
Version 8.1.3
Version 8.1.3
Version 8.1.4
Version 8.1.4
Version 8.1.4
Version 8.1
Version 8.1
Version 9.0.0
Version 9.0
Version 9.0
Version 9.1
Version 9.1
Version 9
Adobe
Version 7.0.1
Version 7.0.2
Version 7.0.3
Version 7.0.4
Version 7.0.5
Version 7.0.6
Version 7.0.7
Version 7.0.8
Version 7.0.9
Version 7.0
Version 7.1.1
Version 7.1
Version 8.0
Version 8.1.1
Version 8.1.2
Version 8.1.2 security_update
Version 8.1.3
Version 8.1.4
Version 8.1.5
Version 8.1
Version 9.1.1
Version 9.1.2
Version 9.1.3
Version 9.1
Version 9

References (12)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.