Vulnerability CVE-2009-3955 - CERT Civis.Net

Vulnerability Name:

CVE-2009-3955 (CCN-55553)

Assigned:

2009-11-16

Published:

2010-01-12

Updated:

2018-10-30

Summary:

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.
Per: http://www.adobe.com/support/security/bulletins/apsb10-02.html

Affected software versions

Adobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIX
Adobe Acrobat 9.2 and earlier versions for Windows and Macintosh
Per: http://www.adobe.com/support/security/bulletins/apsb10-02.html

a memory corruption vulnerability that could lead to code execution (CVE-2009-3955).

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2009-3955

Source: IDEFENSE
Type: UNKNOWN
20100113 Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability

Source: SUSE
Type: UNKNOWN
SUSE-SA:2010:008

Source: CCN
Type: RHSA-2010-0037
Critical: acroread security and bug fix update

Source: CCN
Type: RHSA-2010-0038
Critical: acroread security update

Source: CCN
Type: RHSA-2010-0060
Critical: acroread security update

Source: CCN
Type: SA37690
Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption

Source: CCN
Type: SA38138
Adobe Reader/Acrobat 7 Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
38138

Source: SECUNIA
Type: UNKNOWN
38215

Source: CCN
Type: SECTRACK ID: 1023446
Adobe Acrobat and Adobe Reader Flaws Lets Remote Users Execute Arbitrary Code and Deny Service

Source: CCN
Type: Adobe Product Security Bulletin APSB10-02
Security updates available for Adobe Reader and Acrobat

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-02.html

Source: REDHAT
Type: UNKNOWN
RHSA-2010:0060

Source: BID
Type: UNKNOWN
37757

Source: CCN
Type: BID-37757
Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability

Source: SECTRACK
Type: UNKNOWN
1023446

Source: CERT
Type: US Government Resource
TA10-013A

Source: VUPEN
Type: Vendor Advisory
ADV-2010-0103

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=554293

Source: XF
Type: UNKNOWN
acrobat-reader-jpxdecode-code-exec(55553)

Source: XF
Type: UNKNOWN
acrobat-reader-jpxdecode-code-exec(55553)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:8255

Source: SUSE
Type: SUSE-SA:2010:008
Acrobat Reader security problems

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:acrobat:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:3.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:*:*:*:*:*:*:*:* (Version <= 9.2)

AND

cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:3.01:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:3.02:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:*:*:*:*:*:*:*:* (Version <= 9.2)

AND

cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:adobe:reader:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:9.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:9.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:reader:9.2:*:*:*:*:*:*:*

AND

cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20093955	V	CVE-2009-3955	2015-11-16
oval:org.mitre.oval:def:22917	P	ELSA-2010:0037: acroread security and bug fix update (Critical)	2014-05-26
oval:org.mitre.oval:def:21374	P	RHSA-2010:0037: acroread security and bug fix update (Critical)	2014-02-24
oval:org.mitre.oval:def:8255	V	Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability	2013-08-12
oval:com.redhat.rhsa:def:20100037	P	RHSA-2010:0037: acroread security and bug fix update (Critical)	2010-01-13