Adobe Acrobat Remote Buffer Overflow Vulnerability

Bugtraq ID:	18943
Class:	Boundary Condition Error
CVE:	CVE-2006-3453
Remote:	Yes
Local:	No
Published:	Jul 11 2006 12:00AM
Updated:	Jul 13 2006 06:48PM
Credit:	The vendor announced this vulnerability.
Vulnerable:	Adobe Acrobat 6.0.4 Adobe Acrobat 6.0.3 Adobe Acrobat 6.0.2 Adobe Acrobat 6.0.1 Adobe Acrobat 6.0 Adobe Acrobat 5.0.5 Adobe Acrobat 5.0
Not Vulnerable:	Adobe Acrobat 6.0.5

Adobe Acrobat Remote Buffer Overflow Vulnerability

Adobe Acrobat is affected by a remote buffer-overflow vulnerability.

An attacker can exploit this issue by crafting a malicious PDF file and sending it to a vulnerable user. A successful attack may result in arbitrary code execution.

This issue affects Acrobat 6.0.4 and prior versions.

Adobe Acrobat Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Adobe Acrobat Remote Buffer Overflow Vulnerability

Solution:
Adobe has released updates to address this issue. The vendor advises customers to obtain version 6.0.5 using the automatic update facility or from the following location:

http://www.adobe.com/support/downloadshttp://www.adobe.com/support/downloads

Adobe Acrobat Remote Buffer Overflow Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Buffer Overflow Vulnerability in Adobe Acrobat (Adobe)