Vulnerability CVE-2009-0198 - CERT Civis.Net

Vulnerability Name:

CVE-2009-0198 (CCN-51015)

Assigned:

2009-06-09

Published:

2009-06-09

Updated:

2018-10-11

Summary:

Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2009-0198

Source: SUSE
Type: UNKNOWN
SUSE-SA:2009:035

Source: SUSE
Type: UNKNOWN
SUSE-SR:2009:012

Source: CCN
Type: RHSA-2009-1109
Critical: acroread security update

Source: CCN
Type: SA34580
Adobe Reader/Acrobat Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
34580

Source: SECUNIA
Type: UNKNOWN
35496

Source: SECUNIA
Type: UNKNOWN
35655

Source: SECUNIA
Type: UNKNOWN
35685

Source: SECUNIA
Type: UNKNOWN
35734

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2009-24/

Source: GENTOO
Type: UNKNOWN
GLSA-200907-06

Source: CCN
Type: SECTRACK ID: 1022361
Adobe Acrobat and Adobe Reader Buffer Overflows Let Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1022361

Source: CCN
Type: Sun Alert ID: 265330
Multiple Security Vulnerabilities in Adobe Reader for Solaris 10 May Allow Execution of Arbitrary Code or Cause Denial of Service (DoS) (Adobe Security Bulletin APSB09-07)

Source: CCN
Type: ASA-2009-241
acroread security update (RHSA-2009-1109)

Source: CCN
Type: NORTEL BULLETIN ID: 2009009587, Rev 1
Nortel Response to APSB09-07 Adobe Quarterly Security Update for June 2009

Source: CCN
Type: Adobe Product Security Bulletin APSB09-07
Security Updates available for Adobe Reader and Acrobat

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb09-07.html

Source: CCN
Type: GLSA-200907-06
Adobe Reader: User-assisted execution of arbitrary code

Source: CCN
Type: OSVDB ID: 56106
Adobe Reader / Acrobat JBIG2 Filter Huffman Encoded Text Region Segment Handling Memory Corruption

Source: REDHAT
Type: UNKNOWN
RHSA-2009:1109

Source: BUGTRAQ
Type: UNKNOWN
20090610 Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow

Source: BID
Type: UNKNOWN
35274

Source: CCN
Type: BID-35274
Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities

Source: BID
Type: UNKNOWN
35302

Source: CCN
Type: BID-35302
Adobe Reader and Acrobat Huffman-encoded JBIG2 Text Heap Overflow Vulnerability

Source: CERT
Type: US Government Resource
TA09-161A

Source: VUPEN
Type: Patch, Vendor Advisory
ADV-2009-1547

Source: XF
Type: UNKNOWN
reader-acrobat-jbig2-code-exec(51015)

Source: XF
Type: UNKNOWN
reader-acrobat-jbig2-code-exec(51015)

Source: SUSE
Type: SUSE-SA:2009:035
Acrobat Reader security problems

Source: SUSE
Type: SUSE-SR:2009:012
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2009:014
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20090198	V	CVE-2009-0198	2015-11-16
oval:org.mitre.oval:def:22229	P	ELSA-2009:1109: acroread security update (Critical)	2014-05-26
oval:com.redhat.rhsa:def:20091109	P	RHSA-2009:1109: acroread security update (Critical)	2009-06-17