Description

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.

References

• BID-36638
• CERT-TA09-286B
• CVE-2009-2992
• OVAL-OVAL6054

Solution Reference

Solution

Related Vulnerabilities

• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-3460)
• Gentoo Linux: CVE-2009-3458: Adobe Reader: Multiple vulnerabilities
• Gentoo Linux: CVE-2009-2988: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2988)
• Adobe APSB09-15: Adobe Reader 'AcroPDF.dll' ActiveX Control Denial of Service Vulnerability
• Adobe APSB09-15: Adobe Reader U3D Data Pointer Dereference Vulnerability
• SUSE Linux Security Vulnerability: CVE-2009-2993
• Adobe APSB09-15: Adobe Reader Trust Manager Security Bypass Vulnerability
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2996)
• Gentoo Linux: CVE-2009-2979: Adobe Reader: Multiple vulnerabilities
• Gentoo Linux: CVE-2009-2981: Adobe Reader: Multiple vulnerabilities
• Adobe APSB09-15: Adobe Reader JavaScript Memory Corruption Vulnerability
• Gentoo Linux: CVE-2009-3462: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2998)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2992)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2997)
• SUSE Linux Security Vulnerability: CVE-2009-2982
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2980)
• Adobe APSB09-15: Adobe Reader COM Objects Memory Corruption Vulnerability
• Adobe APSB09-15: Adobe Reader Multiple Heap Overflow Vulnerabilities
• Adobe APSB09-15: Adobe Reader Debug Mode Remote Code Execution
• SUSE Linux Security Vulnerability: CVE-2009-2990
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2987)
• SUSE Linux Security Vulnerability: CVE-2009-2994
• SUSE Linux Security Vulnerability: CVE-2009-3462
• SUSE Linux Security Vulnerability: CVE-2009-2985
• Adobe APSB09-15: Adobe Reader XMP-XML Denial of Service Vulnerability
• Gentoo Linux: CVE-2009-2980: Adobe Reader: Multiple vulnerabilities
• Adobe APSB09-15: Adobe Reader JavaScript Memory Consumption Vulnerability
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2994)
• Gentoo Linux: CVE-2009-2998: Adobe Reader: Multiple vulnerabilities
• Gentoo Linux: CVE-2009-2983: Adobe Reader: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2009-2980
• SUSE Linux Security Vulnerability: CVE-2009-3458
• RHSA-2009:1499: acroread security update
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2985)
• Gentoo Linux: CVE-2009-2993: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2995)
• Gentoo Linux: CVE-2009-2991: Adobe Reader: Multiple vulnerabilities
• Adobe APSB09-15: Adobe Reader JavaScript Multiple Input Validation Vulnerabilities
• Adobe APSB09-15: Adobe Reader Compact Font Heap Corruption Vulnerability
• SUSE Linux Security Vulnerability: CVE-2009-2979
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-3458)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2983)
• Gentoo Linux: CVE-2009-2985: Adobe Reader: Multiple vulnerabilities
• Gentoo Linux: CVE-2009-2996: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2984)
• Adobe APSB09-15: Adobe Reader Mozilla Firefox Plugin Memory Corruption Vulnerability
• Gentoo Linux: CVE-2009-2986: Adobe Reader: Multiple vulnerabilities
• Adobe APSB09-15: Adobe Reader Integer Overflow Vulnerability
• Adobe APSB09-15: Adobe Reader Certificate Modification Vulnerability
• Gentoo Linux: CVE-2009-2982: Adobe Reader: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2009-2998
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2981)
• Adobe APSB09-15: Adobe Reader U3D 'CLODMeshDeclaration' Buffer Overflow Vulnerability
• Adobe APSB09-15: Adobe Reader U3D File Pointer Overwrite Vulnerability
• Sun Patch: SunOS 5.10: Adobe Acrobat Reader patch
• Gentoo Linux: CVE-2009-2997: Adobe Reader: Multiple vulnerabilities
• Adobe APSB09-15: Adobe Reader Malformed U3D Data Heap Overflow Vulnerability
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2979)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2993)
• Adobe APSB09-15: Adobe Reader 'annots.api' Denial of Service Vulnerability
• SUSE Linux Security Vulnerability: CVE-2009-2996
• Adobe APSB09-15: Adobe Reader ActiveX Input Validation Denial of Service Vulnerability
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-3461)
• SUSE Linux Security Vulnerability: CVE-2009-2997
• SUSE Linux Security Vulnerability: CVE-2009-2991
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2990)
• SUSE Linux Security Vulnerability: CVE-2009-2983
• SUSE Linux Security Vulnerability: CVE-2009-2986
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2982)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-3462)
• SUSE Linux Security Advisory: SUSE-SA:2009:049
• Gentoo Linux: CVE-2009-2990: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2991)
• SUSE Linux Security Vulnerability: CVE-2009-2988
• Gentoo Linux: CVE-2009-2994: Adobe Reader: Multiple vulnerabilities
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2989)
• APSB09-15: Security updates available for Adobe Reader and Acrobat (CVE-2009-2986)
• SUSE Linux Security Vulnerability: CVE-2009-2981
• Adobe APSB09-15: Adobe Reader U3D File Invalid Array Index Vulnerability