exploits , vulnerabilities , articles , Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

Title	Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability
Published	2009-10-13-12:00AM
Updated	2009-10-14-10:28PM
Class	Input Validation Error
CVE	CVE-2009-2979
Remote	Yes
Local	No
Credit	Didier Stevens
Vulnerable	RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux WS Extras 3 RedHat Enterprise Linux Supplementary 5 server RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux ES Extras 3 RedHat Enterprise Linux Desktop Supplementary 5 client RedHat Enterprise Linux AS Extras 4 RedHat Enterprise Linux AS Extras 3 RedHat Desktop Extras 4 RedHat Desktop Extras 3 Adobe Reader 9.1.2 Adobe Reader 8.1.6 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Reader 9.1.3 Adobe Acrobat Reader 9.1.2 Adobe Acrobat Reader 9.1.1 Adobe Acrobat Reader 8.1.6 Adobe Acrobat Reader 8.1.5 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 8.1.3 Adobe Acrobat Reader 8.1.2 Adobe Acrobat Reader 8.1.1 Adobe Acrobat Reader 9.1 Adobe Acrobat Reader 9 Adobe Acrobat Reader 8.1.2 Security Updat Adobe Acrobat Reader 8.1 Adobe Acrobat Reader 8.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 3D 8.1.3 Adobe Acrobat 3D 8.1.2 Adobe Acrobat 9.1.1
Not Vulnerable	Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 9.2 Adobe Acrobat Reader 8.1.7 Adobe Acrobat Reader 9.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 9.2
Code	Attackers can exploit this issue by tricking a victim into opening a malicious file.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability