Vulnerability CVE-2009-4324 - CERT Civis.Net

Vulnerability Name:

CVE-2009-4324 (CCN-54747)

Assigned:

2009-12-11

Published:

2009-12-11

Updated:

2018-10-30

Summary:

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.7 High (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.7 High (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.6 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: Adobe Product Security Incident Response Team (PSIRT) Blog
New Adobe Reader and Acrobat Vulnerability

Source: MISC
Type: Vendor Advisory
http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html

Source: CCN
Type: Contagio Blog
ZERO DAY ADOBE Attack of the Day. Fwd: Reference from christanderson.ma@gmail.com Fri 2009-12-11 01:08

Source: MISC
Type: UNKNOWN
http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html

Source: MITRE
Type: CNA
CVE-2009-4324

Source: SUSE
Type: UNKNOWN
SUSE-SA:2010:008

Source: OSVDB
Type: UNKNOWN
60980

Source: CCN
Type: RHSA-2010-0037
Critical: acroread security and bug fix update

Source: CCN
Type: RHSA-2010-0038
Critical: acroread security update

Source: CCN
Type: RHSA-2010-0060
Critical: acroread security update

Source: CCN
Type: SA37690
Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption

Source: SECUNIA
Type: Vendor Advisory
37690

Source: CCN
Type: SA38138
Adobe Reader/Acrobat 7 Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
38138

Source: SECUNIA
Type: Vendor Advisory
38215

Source: CCN
Type: Adobe Product Security Advisory APSA09-07
Security Advisory for Adobe Reader and Acrobat

Source: CONFIRM
Type: Vendor Advisory
http://www.adobe.com/support/security/advisories/apsa09-07.html

Source: CCN
Type: Adobe Product Security Bulletin APSB10-02
Security updates available for Adobe Reader and Acrobat

Source: CONFIRM
Type: UNKNOWN
http://www.adobe.com/support/security/bulletins/apsb10-02.html

Source: CCN
Type: GLSA-201009-05
Adobe Reader: Multiple vulnerabilities

Source: CCN
Type: IBM Internet Security Systems Protection Alert
Adobe Acrobat and Acrobat Reader Remote Code Execution

Source: CCN
Type: US-CERT VU#508357
Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method

Source: CERT-VN
Type: US Government Resource
VU#508357

Source: MISC
Type: UNKNOWN
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb

Source: CCN
Type: OSVDB ID: 60980
Adobe Reader / Acrobat Doc.media.newPlayer Use-After-Free Arbitrary Code Execution

Source: REDHAT
Type: UNKNOWN
RHSA-2010:0060

Source: BID
Type: UNKNOWN
37331

Source: CCN
Type: BID-37331
Adobe Reader and Acrobat 'newplayer()' JavaScript Method Remote Code Execution Vulnerability

Source: MISC
Type: UNKNOWN
http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214

Source: MISC
Type: UNKNOWN
http://www.symantec.com/connect/blogs/zero-day-xmas-present

Source: CERT
Type: US Government Resource
TA10-013A

Source: VUPEN
Type: Vendor Advisory
ADV-2009-3518

Source: VUPEN
Type: UNKNOWN
ADV-2010-0103

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=547799

Source: XF
Type: UNKNOWN
acro-reader-unspecifed-code-execution(54747)

Source: XF
Type: UNKNOWN
acro-reader-unspecifed-code-execution(54747)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6795

Source: SUSE
Type: SUSE-SA:2010:008
Acrobat Reader security problems

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:acrobat:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:*:*:*:*:*:*:*:* (Version <= 9.2)

OR cpe:/a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:*:*:*:*:*:*:*:* (Version <= 9.2)

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:adobe:acrobat:*:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:3.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0::professional_extended:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:standard:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1:*:professional:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:3:*:*:*:*:*:*:*

OR cpe:/a:redhat:rhel_extras:4:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat:9.2:*:*:*:*:*:*:*

OR cpe:/a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20094324	V	CVE-2009-4324	2015-11-16
oval:org.mitre.oval:def:22917	P	ELSA-2010:0037: acroread security and bug fix update (Critical)	2014-05-26
oval:org.mitre.oval:def:21374	P	RHSA-2010:0037: acroread security and bug fix update (Critical)	2014-02-24
oval:org.mitre.oval:def:6795	V	Adobe Reader and Acrobat Unspecified Code Execution Vulnerability	2013-08-12
oval:com.redhat.rhsa:def:20100037	P	RHSA-2010:0037: acroread security and bug fix update (Critical)	2010-01-13