CVE-2009-3431: Buffer Overflow

Published Sep 25, 2009

Updated

Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a large number of [ (open square bracket) characters in the argument to the alert method. NOTE: some of these details are obtained from third party information.

Affected Software

85 affected components

Adobe Acrobat=7.0

Adobe Acrobat=7.0.1

Adobe Acrobat=7.0.2

Adobe Acrobat=7.0.3

Adobe Acrobat=7.0.4

Adobe Acrobat=7.0.5

Adobe Acrobat=7.0.6

Adobe Acrobat=7.0.7

Adobe Acrobat=7.0.8

Adobe Acrobat=7.0.9

Adobe Acrobat=7.1

Adobe Acrobat=7.1.0

Adobe Acrobat=7.1.1

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.2-security_update

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=9

Adobe Acrobat=9.0

Adobe Acrobat=9.0.0

Adobe Acrobat=9.1

Adobe Acrobat reader=7.0

Adobe Acrobat reader=7.0.1

Adobe Acrobat reader=7.0.2

Adobe Acrobat reader=7.0.3

Adobe Acrobat reader=7.0.4

Adobe Acrobat reader=7.0.5

Adobe Acrobat reader=7.0.6

Adobe Acrobat reader=7.0.7

Adobe Acrobat reader=7.0.8

Adobe Acrobat reader=7.0.9

Adobe Acrobat reader=7.1

Adobe Acrobat reader=7.1.1

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.2-security_update

Adobe Acrobat reader=8.1.3

Adobe Acrobat reader=8.1.4

Adobe Acrobat reader=8.1.5

Adobe Acrobat reader=9

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Event History

Sep 25, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3431?

CVE-2009-3431 has a severity rating that indicates a denial of service vulnerability that can lead to application crashes.

How do I fix CVE-2009-3431?

To fix CVE-2009-3431, users should update Adobe Reader and Acrobat to the latest available version.

Which versions of Adobe Reader are affected by CVE-2009-3431?

CVE-2009-3431 affects Adobe Reader versions 9.x, 8.x, and potentially 7.x.

What impact does CVE-2009-3431 have on my system?

The impact of CVE-2009-3431 is the potential for application crashes caused by specially crafted PDF files.

Can CVE-2009-3431 be exploited remotely?

Yes, CVE-2009-3431 can be exploited remotely through the opening of malicious PDF files.