Use-after-free error in Adobe Reader and Adobe Acrobat - CVE-2009-4324

Vulnerability identifier: #VU1391

CSH Severity: Critical

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2009-4324

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to use-after-free error in the Doc.media.newPlayer method in Multimedia.api. A remote attacker can create a specially crafted .pdf file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Note: the vulnerability was being actively exploited.

Adobe Reader
Adobe Acrobat
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop

Update Adobe Reader and Adobe Acrobat 8.1.7 or earlier to version 8.2.
Update Adobe Reader and Adobe Acrobat 9.2 or earlier to version 9.3.

http://get.adobe.com/reader
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh

• Exploit #615 - Adobe - Doc.media.newPlayer Use-After-Free (Metasploit) (2) (March 18, 2020)
• Exploit #616 - Adobe - Doc.media.newPlayer Use-After-Free (Metasploit) (1) (March 18, 2020)
• Exploit #617 - Adobe Reader and Acrobat - Exploit (March 18, 2020)
• Exploit #1644 - Adobe Doc.media.newPlayer Use After Free Vulnerability (March 18, 2020)
• Exploit #1703 - Adobe Doc.media.newPlayer Use After Free Vulnerability (March 18, 2020)

• http://www.adobe.com/support/security/advisories/apsa09-07.html
• http://www.adobe.com/support/security/bulletins/apsb10-02.html

• Remote code execution in Adobe Acrobat and Adobe Reader
• Red Hat update for acroread