CVE:CVE-2009-3956
CNNVD:CNNVD-201001-090
Adobe Reader和Acrobat都是非常流行的PDF文件阅读器。
Adobe Reader和Acrobat的默认配置允许用户通过更改Enhanced Security设置执行脚本注入攻击。多个Web浏览器和操作系统可使用Adobe Reader浏览器插件，会自动打开网站上的PDF文档。
solution:Upgrade adobe acrobat to a higher version than 9.2,3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,7.1.2,7.1.3,7.1.4,8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,and avoid the version (,9.2],3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,7.1.2,7.1.3,7.1.4,8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3; Upgrade adobe acrobat_reader to a higher version than 9.2,3.0,3.01,3.02,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,7.1.2,7.1.3,8.0,8.1,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,and avoid the version (,9.2],3.0,3.01,3.02,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,7.0.8,7.0.9,7.1.0,7.1.1,7.1.2,7.1.3,8.0,8.1,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3