First published: Mon Oct 19 2009(Updated: )
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | =8.0 | |
Adobe Acrobat Reader | =8.1.2 | |
Adobe Acrobat Reader | =7.0.2 | |
Adobe Acrobat Reader | =7.0.3 | |
Adobe Acrobat Reader | =7.1.0 | |
Adobe Acrobat Reader | =7.0.8 | |
Adobe Acrobat Reader | =7.1.1 | |
Adobe Acrobat Reader | =8.1.1 | |
Adobe Acrobat Reader | =8.1 | |
Adobe Acrobat Reader | =9.0 | |
Adobe Acrobat Reader | =7.0.6 | |
Adobe Acrobat Reader | =7.0.7 | |
Adobe Acrobat Reader | =9.1.1 | |
Adobe Acrobat Reader | =7.1.3 | |
Adobe Acrobat Reader | =8.1.4 | |
Adobe Acrobat Reader | <=9.1.3 | |
Adobe Acrobat Reader | =7.0.1 | |
Adobe Acrobat Reader | =7.0.5 | |
Adobe Acrobat Reader | =7.0.4 | |
Adobe Acrobat Reader | =9.1.2 | |
Adobe Acrobat Reader | =7.0.9 | |
Adobe Acrobat Reader | =8.1.6 | |
Adobe Acrobat Reader | =7.0 | |
Adobe Acrobat Reader | =8.1.3 | |
Adobe Acrobat Reader | =7.0.9 | |
Adobe Acrobat Reader | <=9.1.3 | |
Adobe Acrobat Reader | =8.1.6 | |
Adobe Acrobat Reader | =7.1.3 | |
Adobe Acrobat Reader | =7.0.5 | |
Adobe Acrobat Reader | =7.0.6 | |
Adobe Acrobat Reader | =7.1.0 | |
Adobe Acrobat Reader | =9.1 | |
Adobe Acrobat Reader | =7.0.8 | |
Adobe Acrobat Reader | =8.0 | |
Adobe Acrobat Reader | =7.0.7 | |
Adobe Acrobat Reader | =9.1.2 | |
Adobe Acrobat Reader | =8.1.5 | |
Adobe Acrobat Reader | =7.0.3 | |
Adobe Acrobat Reader | =9.1.1 | |
Adobe Acrobat Reader | =7.0.1 | |
Adobe Acrobat Reader | =7.0.2 | |
Adobe Acrobat Reader | =7.0 | |
Adobe Acrobat Reader | =8.1.4 | |
Adobe Acrobat Reader | =8.1.2 | |
Adobe Acrobat Reader | =9.0 | |
Adobe Acrobat Reader | =8.1.1 | |
Adobe Acrobat Reader | =8.1 | |
Adobe Acrobat Reader | =8.1.3 | |
Adobe Acrobat Reader | =7.1.1 | |
Adobe Acrobat Reader | =7.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-3462 has a severity rating that indicates a potential for arbitrary code execution, which is critical.
To fix CVE-2009-3462, ensure that you update Adobe Reader and Acrobat to the latest versions that are patched against this vulnerability.
CVE-2009-3462 affects Adobe Reader and Acrobat versions 7.x (before 7.1.4), 8.x (before 8.1.7), and 9.x (before 9.2) on Unix.
Yes, CVE-2009-3462 can potentially be exploited remotely when Debug mode is enabled.
The impact of CVE-2009-3462 on affected systems includes the possibility for unauthorized users to execute arbitrary code.