Integer Overflow or Wraparound in Adobe Acrobat - CVE-2009-2995

Vulnerability identifier: #VU2664

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2009-2995

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS conditions on the target system.

The weakness exists due to integer overflow that triggers the application to crash.

Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.

Adobe Acrobat

Update Adobe Acrobat for Windows and Macintosh to version 9.2:
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh

• http://www.adobe.com/support/security/bulletins/apsb09-15.html

• Multiple vulnerabilities in Adobe Reader and Adobe Acrobat