CVE-2009-0928

Common Vulnerabilities and Exposures

CVE-2009-0928 at MITRE

Details

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

Novell Bugzilla entry: 488619

SUSE Security Advisories:

SUSE-SA:2009:014 , published Fri, 27 Mar 2009 14:00:00 +0000
SUSE-SR:2009:009 , published Tue, 21 Apr 2009 15:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3 openSUSE 11.0	`acroread >= 8.1.4-0.1`	ZYPP Patch Nr: 6120 SAT Patch Nr: 689
openSUSE 11.1	`acroread >= 8.1.4-0.1.1`	ZYPP Patch Nr: 6120 SAT Patch Nr: 689
SLED 11	`acroread_ja >= 8.1.4-0.1.1`	sle11. x86 sle11. x86-64 SAT Patch Nr: 769
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86	`acroread >= 8.1.4-0.3`	sled10-sp2. x86-64 sled10-sp2. x86 ZYPP Patch Nr: 6121
SLES 11 DEBUGINFO	`acroread-debuginfo >= 8.1.4-0.9.1`	sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 SAT Patch Nr: 690
SLED 11	`acroread >= 8.1.4-0.9.1`	sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. x86 sle11-debuginfo. x86-64 SAT Patch Nr: 690
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86	`acroread_ja >= 8.1.4-0.3`	sled10-sp2. x86 sled10-sp2. x86-64 ZYPP Patch Nr: 6161