製品・ソフトウェアに関する情報

JVN脆弱性詳細

Adobe Reader および Acrobat における任意のコードを実行される脆弱性

Title	Adobe Reader および Acrobat における任意のコードを実行される脆弱性
Summary	Microsoft Windows および Apple Mac OS X 上で稼動する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。
Possible impacts	巧妙に細工された JPC_MS_RGN マーカにより、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 12, 2010, midnight
Registration Date	Feb. 10, 2010, 1:38 p.m.
Last Update	Feb. 10, 2010, 1:38 p.m.

CVSS2.0 : 危険
Score	10
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected System

レッドハット

Red Hat Enterprise Linux Extras 3 extras

Red Hat Enterprise Linux Extras 4 extras

Red Hat Enterprise Linux Extras 4.8.z extras

RHEL Desktop Supplementary 5 (client)

RHEL Supplementary 5 (server)

RHEL Supplementary EUS 5.4.z (server)

アドビシステムズ

Adobe Acrobat 8.2 未満

Adobe Acrobat 9.3 未満

Adobe Reader 8.2 未満

Adobe Reader 9.3 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2009-3955	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3955
National Vulnerability Database (NVD)
2	CVE-2009-3955	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3955

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Adobe Security Bulletin
1	APSB10-02	http://www.adobe.com/support/security/bulletins/apsb10-02.html
Adobe セキュリティ情報
2	APSB10-02	http://www.adobe.com/jp/support/security/bulletins/apsb10-02.html
Red Hat Security Advisory
3	RHSA-2010:0037	https://rhn.redhat.com/errata/RHSA-2010-0037.html
4	RHSA-2010:0038	https://rhn.redhat.com/errata/RHSA-2010-0038.html
5	RHSA-2010:0060	https://rhn.redhat.com/errata/RHSA-2010-0060.html
富士通セキュリティ情報
6	TA10-013A	http://software.fujitsu.com/jp/security/vulnerabilities/ta10-013a.html

その他

No	Name	URL
IPA 緊急対策情報
1	20100113-adobe	http://www.ipa.go.jp/security/ciadr/vul/20100113-adobe.html
ISS X-Force Database
2	55553	http://xforce.iss.net/xforce/xfdb/55553
JPCERT 緊急報告
3	JPCERT-AT-2010-0003	http://www.jpcert.or.jp/at/2010/at100003.txt
JVN
4	JVNTA10-013A	http://jvn.jp/cert/JVNTA10-013A/
JVN Status Tracking Notes
5	JVNTR-2010-03	http://jvn.jp/tr/JVNTR-2010-03/
SecurityFocus
6	37757	http://www.securityfocus.com/bid/37757
SecurityTracker
7	1023446	http://www.securitytracker.com/id?1023446
US-CERT Cyber Security Alerts
8	SA10-013A	http://www.us-cert.gov/cas/alerts/SA10-013A.html
US-CERT Technical Cyber Security Alert
9	TA10-013A	http://www.us-cert.gov/cas/techalerts/TA10-013A.html
VUPEN Security
10	VUPEN/ADV-2010-0103	http://www.vupen.com/english/advisories/2010/0103
警察庁 @police
11	アドビシステムズ社の Adobe Reader および Adobe Acrobat のセキュリティ修正プログラムについて	http://www.npa.go.jp/cyberpolice/index.html#topics

Change Log

No	Changed Details	Date of change
0	[2010年02月10日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2009-3955

Summary	Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.
Summary	Per: http://www.adobe.com/support/security/bulletins/apsb10-02.html Affected software versions Adobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIX Adobe Acrobat 9.2 and earlier versions for Windows and Macintosh
Summary	Per: http://www.adobe.com/support/security/bulletins/apsb10-02.html a memory corruption vulnerability that could lead to code execution (CVE-2009-3955).
Publication Date	Jan. 14, 2010, 4:30 a.m.
Registration Date	Jan. 29, 2021, 1:25 p.m.
Last Update	Oct. 31, 2018, 1:25 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:3.0:::::::*
cpe:2.3:a:adobe:acrobat:3.1:::::::*
cpe:2.3:a:adobe:acrobat:4.0:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5a:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5c:::::::*
cpe:2.3:a:adobe:acrobat:5.0:::::::*
cpe:2.3:a:adobe:acrobat:5.0.5:::::::*
cpe:2.3:a:adobe:acrobat:5.0.6:::::::*
cpe:2.3:a:adobe:acrobat:5.0.10:::::::*
cpe:2.3:a:adobe:acrobat:6.0:::::::*
cpe:2.3:a:adobe:acrobat:6.0.1:::::::*
cpe:2.3:a:adobe:acrobat:6.0.2:::::::*
cpe:2.3:a:adobe:acrobat:6.0.3:::::::*
cpe:2.3:a:adobe:acrobat:6.0.4:::::::*
cpe:2.3:a:adobe:acrobat:6.0.5:::::::*
cpe:2.3:a:adobe:acrobat:6.0.6:::::::*
cpe:2.3:a:adobe:acrobat:7.0:::::::*
cpe:2.3:a:adobe:acrobat:7.0.1:::::::*
cpe:2.3:a:adobe:acrobat:7.0.2:::::::*
cpe:2.3:a:adobe:acrobat:7.0.3:::::::*
cpe:2.3:a:adobe:acrobat:7.0.4:::::::*
cpe:2.3:a:adobe:acrobat:7.0.5:::::::*
cpe:2.3:a:adobe:acrobat:7.0.6:::::::*
cpe:2.3:a:adobe:acrobat:7.0.7:::::::*
cpe:2.3:a:adobe:acrobat:7.0.8:::::::*
cpe:2.3:a:adobe:acrobat:7.0.9:::::::*
cpe:2.3:a:adobe:acrobat:7.1.0:::::::*
cpe:2.3:a:adobe:acrobat:7.1.1:::::::*
cpe:2.3:a:adobe:acrobat:7.1.2:::::::*
cpe:2.3:a:adobe:acrobat:7.1.3:::::::*
cpe:2.3:a:adobe:acrobat:7.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.0:::::::*
cpe:2.3:a:adobe:acrobat:8.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat:8.1.3:::::::*
cpe:2.3:a:adobe:acrobat:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat:9.0:::::::*
cpe:2.3:a:adobe:acrobat:9.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat::::::::			9.2
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:3.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:3.01:::::::*
cpe:2.3:a:adobe:acrobat_reader:3.02:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5a:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5c:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.9:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.10:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.11:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.8:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.9:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader::::::::			9.2
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Related information, measures and tools

No	URL	refsource	タグ
1	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=836	IDEFENSE
2	http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html	SUSE
3	http://secunia.com/advisories/38138	SECUNIA
4	http://secunia.com/advisories/38215	SECUNIA
5	http://www.adobe.com/support/security/bulletins/apsb10-02.html	CONFIRM	Patch Vendor Advisory
6	http://www.redhat.com/support/errata/RHSA-2010-0060.html	REDHAT
7	http://www.securityfocus.com/bid/37757	BID
8	http://www.securitytracker.com/id?1023446	SECTRACK
9	http://www.us-cert.gov/cas/techalerts/TA10-013A.html	CERT	US Government Resource
10	http://www.vupen.com/english/advisories/2010/0103	VUPEN	Vendor Advisory
11	https://bugzilla.redhat.com/show_bug.cgi?id=554293	CONFIRM
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/55553	XF
13	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8255	OVAL

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:3.0:::::::*
cpe:2.3:a:adobe:acrobat:3.1:::::::*
cpe:2.3:a:adobe:acrobat:4.0:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5a:::::::*
cpe:2.3:a:adobe:acrobat:4.0.5c:::::::*
cpe:2.3:a:adobe:acrobat:5.0:::::::*
cpe:2.3:a:adobe:acrobat:5.0.5:::::::*
cpe:2.3:a:adobe:acrobat:5.0.6:::::::*
cpe:2.3:a:adobe:acrobat:5.0.10:::::::*
cpe:2.3:a:adobe:acrobat:6.0:::::::*
cpe:2.3:a:adobe:acrobat:6.0.1:::::::*
cpe:2.3:a:adobe:acrobat:6.0.2:::::::*
cpe:2.3:a:adobe:acrobat:6.0.3:::::::*
cpe:2.3:a:adobe:acrobat:6.0.4:::::::*
cpe:2.3:a:adobe:acrobat:6.0.5:::::::*
cpe:2.3:a:adobe:acrobat:6.0.6:::::::*
cpe:2.3:a:adobe:acrobat:7.0:::::::*
cpe:2.3:a:adobe:acrobat:7.0.1:::::::*
cpe:2.3:a:adobe:acrobat:7.0.2:::::::*
cpe:2.3:a:adobe:acrobat:7.0.3:::::::*
cpe:2.3:a:adobe:acrobat:7.0.4:::::::*
cpe:2.3:a:adobe:acrobat:7.0.5:::::::*
cpe:2.3:a:adobe:acrobat:7.0.6:::::::*
cpe:2.3:a:adobe:acrobat:7.0.7:::::::*
cpe:2.3:a:adobe:acrobat:7.0.8:::::::*
cpe:2.3:a:adobe:acrobat:7.0.9:::::::*
cpe:2.3:a:adobe:acrobat:7.1.0:::::::*
cpe:2.3:a:adobe:acrobat:7.1.1:::::::*
cpe:2.3:a:adobe:acrobat:7.1.2:::::::*
cpe:2.3:a:adobe:acrobat:7.1.3:::::::*
cpe:2.3:a:adobe:acrobat:7.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.0:::::::*
cpe:2.3:a:adobe:acrobat:8.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat:8.1.3:::::::*
cpe:2.3:a:adobe:acrobat:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat:9.0:::::::*
cpe:2.3:a:adobe:acrobat:9.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat::::::::			9.2
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:3.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:3.01:::::::*
cpe:2.3:a:adobe:acrobat_reader:3.02:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5a:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.0.5c:::::::*
cpe:2.3:a:adobe:acrobat_reader:4.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.9:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.10:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.0.11:::::::*
cpe:2.3:a:adobe:acrobat_reader:5.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:6.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.8:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.0.9:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:7.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader::::::::			9.2
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::