CVE:CVE-2009-1062
CNNVD:CNNVD-200903-416
Adobe Acrobat和Reader都是非常流行的PDF文件阅读器。
Adobe Acrobat和Reader在解析PDF文件中的JBIG2编码流时存在堆溢出漏洞。攻击者通过与JBIG2相关的未知向量可以导致内存错误和执行任意代码。
solution:Upgrade adobe acrobat to a higher version than 9.0,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1,7.1.1,8.0,8.1,8.1.1,8.1.2,8.1.2:security_update,8.1.3,8.1.4,and avoid the version (,9.0],7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1,7.1.1,8.0,8.1,8.1.1,8.1.2,8.1.2:security_update,8.1.3,8.1.4; Upgrade adobe acrobat_reader to a higher version than 9.0,7.0,and avoid the version (,9.0],7.0; Upgrade adobe reader to a higher version than 3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0.1,7.0.2,7.0.3,7.0.5,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,8.1.1,8.1.2,8.1.4,and avoid the version 3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0.1,7.0.2,7.0.3,7.0.5,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,8.1.1,8.1.2,8.1.4