BID:14603

Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability

Info

Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability

Bugtraq ID:	14603
Class:	Boundary Condition Error
CVE:	CVE-2005-2470
Remote:	Yes
Local:	No
Published:	Aug 16 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	The vendor announced this vulnerability.
Vulnerable:	SuSE Linux Enterprise Server 9 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Gentoo Linux Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 6.0.3 Adobe Reader 6.0.2 Adobe Reader 6.0.1 Adobe Reader 6.0 Adobe Reader 5.1 Adobe Acrobat Reader (UNIX) 7.0 Adobe Acrobat Reader (UNIX) 5.0.8 + Gentoo Linux + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 8.2 + SuSE Linux 8.1 + SuSE Linux 8.0 i386 + SuSE Linux 8.0 + SuSE Linux Desktop 1.0 + SuSE Linux Enterprise Server 9 + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0 Adobe Acrobat 6.0.3 Adobe Acrobat 6.0.2 Adobe Acrobat 6.0.1 Adobe Acrobat 6.0 Adobe Acrobat 5.0.5 Adobe Acrobat 5.0

Not Vulnerable:	Adobe Reader 7.0.3 Adobe Reader 6.0.4 Adobe Reader 5.0.10 Adobe Acrobat Reader (UNIX) 7.0.1 Adobe Acrobat 7.0.3 Adobe Acrobat 6.0.4 Adobe Acrobat 5.0.10

Discussion

Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability

Adobe Acrobat and Adobe Reader are affected by a remote buffer overflow vulnerability. This issue presents itself because the application fails to perform boundary checks prior to copying user-supplied data into sensitive process buffers.

An attacker can exploit this issue by crafting a malicious PDF file and sending it to a vulnerable user. If the victim user opens this PDF file, the attacker may be able to execute arbitrary code on the affected computer and gain unauthorized access in the context of the user.

Exploit / POC

Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability

Solution:
Gentoo Linux has released security advisory GLSA 200508-11 addressing this issue. Gentoo recommends all Adobe Reader users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/acroread-7.0.1.1"

SUSE has released advisory SUSE-SA:2005:047, along with fixes to address this issue. Please see the referenced advisory for further information.

Adobe has released updates to address this issue:

Adobe Acrobat 5.0