Vulnerability CVE-2009-2028 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2028 (CCN-51126)

Assigned:

2009-06-09

Published:

2009-06-09

Updated:

2017-08-17

Summary:

Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

6.8 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2009-2028

Source: CCN
Type: RHSA-2009-1109
Critical: acroread security update

Source: SECUNIA
Type: UNKNOWN
35496

Source: SECUNIA
Type: UNKNOWN
35734

Source: GENTOO
Type: UNKNOWN
GLSA-200907-06

Source: CCN
Type: ASA-2009-241
acroread security update (RHSA-2009-1109)

Source: CCN
Type: Adobe Product Security Bulletin APSB09-07
Security Updates available for Adobe Reader and Acrobat

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb09-07.html

Source: CCN
Type: GLSA-200907-06
Adobe Reader: User-assisted execution of arbitrary code

Source: CCN
Type: OSVDB ID: 56119
Adobe Reader / Acrobat Multiple Unspecified Issues (Internal)

Source: REDHAT
Type: UNKNOWN
RHSA-2009:1109

Source: XF
Type: UNKNOWN
acrobat-reader-multiple-unspecified(51126)

Source: XF
Type: UNKNOWN
acrobat-reader-multiple-unspecified(51126)

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8::elements:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1::standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4::professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1::professional:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20092028	V	CVE-2009-2028	2015-11-16
oval:org.mitre.oval:def:22229	P	ELSA-2009:1109: acroread security update (Critical)	2014-05-26
oval:com.redhat.rhsa:def:20091109	P	RHSA-2009:1109: acroread security update (Critical)	2009-06-17