Integer Overflow or Wraparound in Adobe Acrobat - CVE-2009-2995

 

Integer Overflow or Wraparound in Adobe Acrobat - CVE-2009-2995

Published: December 22, 2016 / Updated: January 9, 2017


Vulnerability identifier: #VU2664
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2009-2995
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Adobe
Affected software:
Adobe Acrobat

Detailed vulnerability description

The vulnerability allows a remote attacker to cause DoS conditions on the target system.

The weakness exists due to integer overflow that triggers the application to crash.

Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.

How to mitigate CVE-2009-2995


Sources