| Revision Date: | 2013-08-12 | Version: | 17 | | Title: | Adobe Reader and Acrobat allow arbitrary code execution | | Description: | Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998. | | Family: | windows | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2009-3458
| | Platform(s): | Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
| Product(s): | Adobe Acrobat
Adobe Reader
| | Definition Synopsis | | Adobe Reader 7 Adobe Reader 7 Series is installed
AND Adobe Reader 7, the sub-version is vulnerable
Adobe Reader is less than 7.1.4
OR Adobe Reader library is less than 7.1.4.2009100300
OR Adobe Reader 8
Adobe Reader 8 Series is installed
AND Adobe Reader 8, the sub-version is vulnerable
Adobe Reader is less than 8.1.7
OR Adobe Reader library is less than 8.1.7.59
OR Adobe Reader 9
Adobe Reader 9 Series is installed
AND Adobe Reader 9, the sub-version is vulnerable
Adobe Reader is less than 9.2.0
OR Adobe Reader library is less than 9.1.0.2009022700
OR Adobe Acrobat 7
Adobe Acrobat 7 Series is installed
AND Adobe Acrobat 7, the sub-version is vulnerable
Adobe Acrobat is less than 7.1.4
OR Adobe Acrobat library is less than 7.1.4.2009100300
OR Adobe Acrobat 8
Adobe Acrobat 8 Series is installed
AND Adobe Acrobat 8, the sub-version is vulnerable
Adobe Acrobat is less than 8.1.7
OR Adobe Acrobat library is less than 8.1.7.59
OR Adobe Acrobat 9
Adobe Acrobat 9 Series is installed
AND Adobe Acrobat 8, the sub-version is vulnerable
Adobe Acrobat is less than 9.2.0
OR Adobe Acrobat library is less than 9.1.0.2009022700
|
|