10

CVE-2009-3956

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data Format (FDF) behavior that allows cross-site scripting (XSS) by user-assisted remote attackers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version <= 9.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 3.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 3.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 4.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 4.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 4.0.5a
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 4.0.5c
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 5.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 5.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 5.0.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 5.0.10
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 6.0.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.8
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.0.9
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.1.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 7.1.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 8.1.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 9.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 9.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 9.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 9.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 9.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version <= 9.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 3.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 3.01
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 3.02
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 4.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 4.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 4.0.5a
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 4.0.5c
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 4.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.9
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.10
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.0.11
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 5.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 6.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.8
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.0.9
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.1.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 7.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 8.1.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 9.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 9.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 9.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 9.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Adobe ≫ Acrobat Reader Version 9.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
   Unix ≫ Unix
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.73% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
http://secunia.com/advisories/38138
http://secunia.com/advisories/38215
http://www.adobe.com/support/security/bulletins/apsb10-02.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0060.html
http://www.us-cert.gov/cas/techalerts/TA10-013A.html
US Government Resource
http://www.vupen.com/english/advisories/2010/0103
http://www.securitytracker.com/id?1023446
http://www.packetstormsecurity.org/1001-exploits/SS-2010-001.txt
http://www.securityfocus.com/bid/37763
http://www.stratsec.net/files/SS-2010-001_Stratsec_Acrobat_Script_Injection_Security_Advisory_v1.0.pdf
https://bugzilla.redhat.com/show_bug.cgi?id=554296
https://exchange.xforce.ibmcloud.com/vulnerabilities/55554
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8327