Adobe Acrobat and Reader JBIG2 Image Processing Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	34229
Class:	Boundary Condition Error
CVE:	CVE-2009-0193 CVE-2009-0928 CVE-2009-1061 CVE-2009-1062
Remote:	Yes
Local:	No
Published:	Mar 24 2009 12:00AM
Updated:	Mar 19 2015 09:28AM
Credit:	Sean Larsson of iDefense Labs, Alin Rad Pop of Secunia Research, and the vendor.
Vulnerable:	SuSE SUSE Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE openSUSE 10.3 Sun Solaris 10_sparc S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Desktop 10 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service - CCSS7 0 Gentoo Linux Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.0.9 Adobe Reader 7.0.8 Adobe Reader 7.0.7 Adobe Reader 7.0.6 Adobe Reader 7.0.5 Adobe Reader 7.0.4 Adobe Reader 7.0.3 Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 9 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 7.1 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Reader (UNIX) 7.0.1 Adobe Acrobat Reader (UNIX) 7.0 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 Adobe Acrobat 7.0.3 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0
Not Vulnerable:	Adobe Reader 8.1.4 Adobe Reader 7.1.1 Adobe Reader 9.1 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 9.1 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 9.1

Adobe Acrobat and Reader JBIG2 Image Processing Multiple Remote Code Execution Vulnerabilities

Adobe Acrobat and Reader are prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users.

These issues affect Reader and Acrobat 7.1.0, 8.1.3, 9.0.0, and earlier.

Adobe Acrobat and Reader JBIG2 Image Processing Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Acrobat and Reader JBIG2 Image Processing Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


S.u.S.E. openSUSE 11.0

• S.u.S.E. acroread-8.1.4-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/acroread-8.1.4-0.1.i 586.rpm

S.u.S.E. openSUSE 11.1

• S.u.S.E. acroread-8.1.4-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/acroread-8.1.4-0.1.1 .i586.rpm

Adobe Acrobat and Reader JBIG2 Image Processing Multiple Remote Code Execution Vulnerabilities

References:

• Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow (Secunia)
  
• Adobe Acrobat Reader Memory Corruption Vulnerability (iViZ)
  
• Adobe Homepage (Adobe)
  
• Adobe Reader and Acrobat JBIG2 Encoded Stream Heap Overflow Vulnerability (iDefense Labs)
  
• iDefense Security Advisory 03.24.09: Adobe Reader and Acrobat JBIG2 Encoded Stre (iDefense Labs )
  
• 256788 Multiple Security Vulnerabilities in Adobe Reader for Solaris 10 (Sun)
  
• APSB09-04 Security Updates available for Adobe Reader and Acrobat (Adobe)
  
• Nortel response to Sun Alerts 256788 and 262668 on Solaris 10 Potential Vulnerab (Nortel Networks)