风险等级: 緊急
  CVE标识符: : CVE-2009-4324
  建议日期 : 2009年12月17日

  描述

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

  保护信息

Apply associated Trend Micro DPI Rules.

  解决方案

  Trend Micro Deep Security DPI Rule Number: 1004008
  Trend Micro Deep Security DPI Rule Name: 1004008 - Adobe Reader And Acrobat 'newplayer()' JavaScript Method Code Execution

  受感染软件和版本:

  • Adobe Acrobat 6.0
  • Adobe Acrobat 6.0.1
  • Adobe Acrobat 6.0.2
  • Adobe Acrobat 6.0.3
  • Adobe Acrobat 6.0.4
  • Adobe Acrobat 6.0.5
  • Adobe Acrobat 7.0
  • Adobe Acrobat 7.0.1
  • Adobe Acrobat 7.0.2
  • Adobe Acrobat 7.0.3
  • Adobe Acrobat 7.0.4
  • Adobe Acrobat 7.0.5
  • Adobe Acrobat 7.0.6
  • Adobe Acrobat 7.0.7
  • Adobe Acrobat 7.0.8
  • Adobe Acrobat 7.0.9
  • Adobe Acrobat 8.0.0
  • Adobe Acrobat 8.1
  • Adobe Acrobat 8.1.1
  • Adobe Acrobat 8.1.2
  • Adobe Acrobat Reader 3.0
  • Adobe Acrobat Reader 4.0
  • Adobe Acrobat Reader 4.0.5
  • Adobe Acrobat Reader 4.0.5a
  • Adobe Acrobat Reader 4.0.5c
  • Adobe Acrobat Reader 4.5
  • Adobe Acrobat Reader 5.0
  • Adobe Acrobat Reader 5.0.10
  • Adobe Acrobat Reader 5.0.11
  • Adobe Acrobat Reader 5.0.5
  • Adobe Acrobat Reader 5.0.6
  • Adobe Acrobat Reader 5.0.7
  • Adobe Acrobat Reader 5.0.9
  • Adobe Acrobat Reader 5.1
  • Adobe Acrobat Reader 6.0
  • Adobe Acrobat Reader 6.0.1
  • Adobe Acrobat Reader 6.0.2
  • Adobe Acrobat Reader 6.0.3
  • Adobe Acrobat Reader 6.0.4
  • Adobe Acrobat Reader 6.0.5
  • Adobe Acrobat Reader 7.0
  • Adobe Acrobat Reader 7.0.1
  • Adobe Acrobat Reader 7.0.2
  • Adobe Acrobat Reader 7.0.3
  • Adobe Acrobat Reader 7.0.4
  • Adobe Acrobat Reader 7.0.5
  • Adobe Acrobat Reader 7.0.6
  • Adobe Acrobat Reader 7.0.7
  • Adobe Acrobat Reader 7.0.8
  • Adobe Acrobat Reader 7.0.9
  • Adobe Acrobat Reader 8.0
  • Adobe Acrobat Reader 8.1
  • Adobe Acrobat Reader 8.1.1
  • Adobe Acrobat Reader 8.1.2
  • Adobe Acrobat Reader 9.0
  • Adobe Acrobat Reader 9.1
  • Adobe Acrobat Reader 9.2