CVE

Id
41759  
CVE No.
CVE-2009-4324  
Status
Candidate  
Description
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.  
Phase
Assigned (20091214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
458273 41759 CVE-2009-4324 MISC:http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html  View
458274 41759 CVE-2009-4324 MISC:http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html  View
458275 41759 CVE-2009-4324 MISC:http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb  View
458276 41759 CVE-2009-4324 MISC:http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214  View
458277 41759 CVE-2009-4324 MISC:http://www.symantec.com/connect/blogs/zero-day-xmas-present  View
458278 41759 CVE-2009-4324 CONFIRM:http://www.adobe.com/support/security/advisories/apsa09-07.html  View
458279 41759 CVE-2009-4324 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb10-02.html  View
458280 41759 CVE-2009-4324 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=547799  View
458281 41759 CVE-2009-4324 REDHAT:RHSA-2010:0060  View
458282 41759 CVE-2009-4324 URL:http://www.redhat.com/support/errata/RHSA-2010-0060.html  View
458283 41759 CVE-2009-4324 SUSE:SUSE-SA:2010:008  View
458284 41759 CVE-2009-4324 URL:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html  View
458285 41759 CVE-2009-4324 CERT:TA10-013A  View
458286 41759 CVE-2009-4324 URL:http://www.us-cert.gov/cas/techalerts/TA10-013A.html  View
458287 41759 CVE-2009-4324 CERT-VN:VU#508357  View
458288 41759 CVE-2009-4324 URL:http://www.kb.cert.org/vuls/id/508357  View
458289 41759 CVE-2009-4324 BID:37331  View
458290 41759 CVE-2009-4324 URL:http://www.securityfocus.com/bid/37331  View
458291 41759 CVE-2009-4324 OSVDB:60980  View
458292 41759 CVE-2009-4324 URL:http://osvdb.org/60980  View
458293 41759 CVE-2009-4324 OVAL:oval:org.mitre.oval:def:6795  View
458294 41759 CVE-2009-4324 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6795  View
458295 41759 CVE-2009-4324 SECUNIA:37690  View
458296 41759 CVE-2009-4324 URL:http://secunia.com/advisories/37690  View
458297 41759 CVE-2009-4324 SECUNIA:38138  View
458298 41759 CVE-2009-4324 URL:http://secunia.com/advisories/38138  View
458299 41759 CVE-2009-4324 SECUNIA:38215  View
458300 41759 CVE-2009-4324 URL:http://secunia.com/advisories/38215  View
458301 41759 CVE-2009-4324 VUPEN:ADV-2009-3518  View
458302 41759 CVE-2009-4324 URL:http://www.vupen.com/english/advisories/2009/3518  View
458303 41759 CVE-2009-4324 VUPEN:ADV-2010-0103  View
458304 41759 CVE-2009-4324 URL:http://www.vupen.com/english/advisories/2010/0103  View
458305 41759 CVE-2009-4324 XF:acro-reader-unspecifed-code-execution(54747)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41478 JVNDB-2009-002485 IBM DB2 の DRDA Services コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 IBM DB2 の DRDA Services コンポーネントには、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4328 41759 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002485.html  View