CVE:CVE-2009-4324
CNNVD:CNNVD-200912-201
基于Windows和Mac OS X的Adobe Reader和Acrobat 9.3之前的9.x版本和8.2之前的8.x版本的Multimedia.api中的Doc.media.newPlayer方法中存在释放后使用漏洞。远程攻击者可借助使用ZLib压缩流的特制PDF文件执行任意代码。
solution:Upgrade adobe acrobat to a higher version than 6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,8.1.2,and avoid the version 6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,8.1.2; Upgrade adobe acrobat_reader to a higher version than 9.2,3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,8.1.2,9.0,9.1,and avoid the version (,9.2],3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,8.0,8.1,8.1.1,8.1.2,9.0,9.1