ID:638 - Exploit for Denial of service in Adobe Reader and Adobe Acrobat - CVE-2009-3431

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:638 - Exploit for Denial of service in Adobe Reader and Adobe Acrobat - CVE-2009-3431

ID:638 - Exploit for Denial of service in Adobe Reader and Adobe Acrobat - CVE-2009-3431

Published: March 18, 2020


Vulnerability identifier: #VU2669
Vulnerability risk: Low
CVE-ID: CVE-2009-3431
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
Adobe Reader
Adobe Acrobat

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to cause DoS conditions on the target system.

The weakness exists due to stack consumption when handling malformed documents. A remote attacker can create a specially crafted PDF file with a large number of [ (open square bracket) characters in the argument to the alert method, trick the victim into opening it, trigger memory  cause the affected application to crash.

Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.

Remediation