Adobe Reader and Acrobat U3D Model Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	35282
Class:	Boundary Condition Error
CVE:	CVE-2009-1855
Remote:	Yes
Local:	No
Published:	Jun 09 2009 12:00AM
Updated:	Mar 19 2015 08:52AM
Credit:	An anonymous researcher reported through TippingPoint’s Zero Day Initiative
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SuSE openSUSE 10.3 Sun Solaris 10_sparc S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux WS Extras 3 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux ES Extras 3 RedHat Enterprise Linux AS Extras 4 RedHat Enterprise Linux AS Extras 3 RedHat Desktop Extras 4 RedHat Desktop Extras 3 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Gentoo Linux Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Adobe Reader 9.1.1 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.1.2 Adobe Reader 7.1.1 Adobe Reader 7.0.9 Adobe Reader 7.0.8 Adobe Reader 7.0.7 Adobe Reader 7.0.6 Adobe Reader 7.0.5 Adobe Reader 7.0.4 Adobe Reader 7.0.3 Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 9.1 Adobe Reader 9 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 7.1 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1
Not Vulnerable:	Adobe Reader 9.1.2 Adobe Reader 8.1.6 Adobe Reader 7.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6

Adobe Reader and Acrobat U3D Model Remote Stack Buffer Overflow Vulnerability

Adobe Reader and Acrobat are prone to a remote stack-based buffer-overflow vulnerability because they fail to adequately bounds-check user-supplied data.

An attacker can exploit this issue by tricking a victim into opening a malicious file to execute arbitrary code and to cause denial-of-service conditions.

NOTE: This issue was previously covered in BID 35274 (Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.

Adobe Reader and Acrobat U3D Model Remote Stack Buffer Overflow Vulnerability

A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This
proof of concept is not otherwise publicly available or known to be circulating in the wild.

Adobe Reader and Acrobat U3D Model Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


S.u.S.E. openSUSE 11.0

• S.u.S.E. acroread-8.1.6-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/acroread-8.1.6-0.1.i 586.rpm

S.u.S.E. openSUSE 11.1

• S.u.S.E. acroread-8.1.6-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/acroread-8.1.6-0.1.1 .i586.rpm

Adobe Reader and Acrobat U3D Model Remote Stack Buffer Overflow Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability (Zero Day Initiative)
  
• ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability (ZDI Disclosures )
  
• 265330 Adobe Reader for Solaris 10 (Sun)
  
• APSB09-07 Security Updates available for Adobe Reader and Acrobat (Adobe)
  
• ASA-2009-421 Multiple Security Vulnerabilities in Adobe Reader for Solaris 10 Ma (Avaya)
  
• Nortel Response to APSB09-07 Adobe Quarterly Security Update for June 2009 (Nortel Networks)