CVE-2009-3955
Fixed in a distro release EPSS 16%
Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.
Products: adobe acrobat, adobe acrobat_reader
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | acroread-uninstall | 0:9.3-3 |
| Red Hat rhel extras 4 | acroread | 0:9.3-1.el4 |
| Red Hat rhel extras 4 | acroread-plugin | 0:9.3-1.el4 |
| Red Hat rhel extras 5 | acroread | 0:9.3-1.el5 |
| Red Hat rhel extras 5 | acroread-plugin | 0:9.3-1.el5 |