NetSight
IP …
critical9.3

CVE-2009-1861

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 …

Impact

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.

Affected products

VendorProductAffected versions
AdobeAcrobat
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5
AdobeAcrobat Reader
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5

Weakness classification

CWE-119

References