CVE-2009-2990
EXPLOITEDAdobe Acrobat and Reader < 9.2 - Remote Code Execution
Title source: llmExploitation Summary
CVE-2009-2990 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Felipe Andres Manzano, including a Metasploit module exploits/multi/fileformat/adobe_u3d_meshcont.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2009-2990, an array overflow in Adobe Reader/Acrobat via malformed U3D data in a PDF. It uses JavaScript heap spraying to achieve arbitrary code execution.
Description
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
Exploits (3)
This is a Metasploit module exploiting CVE-2009-2990, an array overflow in Adobe Reader/Acrobat via malformed U3D data in a PDF. It uses JavaScript heap spraying to achieve arbitrary code execution.
This exploit targets a vulnerability in Adobe Acrobat Reader (CVE-2009-2990) by crafting a malicious U3D file embedded in a PDF. The exploit leverages an arbitrary dereference in the CLODProgressiveMeshContinuation block to achieve remote code execution.
This Metasploit module exploits a heap-based buffer overflow in Adobe Reader/Acrobat via a malformed U3D file embedded in a PDF. It uses JavaScript heap spraying to achieve arbitrary code execution.