Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
BID:35296
Info
Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
| Bugtraq ID: | 35296 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-1857 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2009 12:00AM |
| Updated: | Oct 15 2009 08:19PM |
| Credit: | Haifei Li of Fortinet's FortiGuard Global Security Research Team |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE Suse Linux Enterprise Desktop 11 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Sun Solaris 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Gentoo Linux Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Adobe Reader 9.1.1 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.1.2 Adobe Reader 7.1.1 Adobe Reader 7.0.9 Adobe Reader 7.0.9 Adobe Reader 7.0.8 Adobe Reader 7.0.8 Adobe Reader 7.0.7 Adobe Reader 7.0.6 Adobe Reader 7.0.5 Adobe Reader 7.0.4 Adobe Reader 7.0.3 Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 7.1 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 |
| Not Vulnerable: |
Adobe Reader 9.1.2 Adobe Reader 8.1.6 Adobe Reader 7.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6 |
Discussion
Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
Adobe Reader and Acrobat are prone to a memory-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions.
NOTE: This issue was previously covered in BID 35274 (Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.
Adobe Reader and Acrobat are prone to a memory-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions.
NOTE: This issue was previously covered in BID 35274 (Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 10.3
S.u.S.E. openSUSE 11.1
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
-
S.u.S.E. acroread-8.1.6-0.1.i586.rpm
http://download.opensuse.org/update/11.0/rpm/i586/acroread-8.1.6-0.1.i 586.rpm
S.u.S.E. openSUSE 10.3
-
S.u.S.E. acroread-8.1.6-0.1.i586.rpm
http://download.opensuse.org/update/11.0/rpm/i586/acroread-8.1.6-0.1.i 586.rpm
S.u.S.E. openSUSE 11.1
-
S.u.S.E. acroread-8.1.6-0.1.1.i586.rpm
http://download.opensuse.org/update/11.1/rpm/i586/acroread-8.1.6-0.1.1 .i586.rpm
References
Adobe Reader and Acrobat TrueType Font Handling Memory Corruption Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corrup ("[email protected]"
- 265330 Adobe Reader for Solaris 10 (Sun)
- APSB09-07 Security Updates available for Adobe Reader and Acrobat (Adobe)
- ASA-2009-421 Multiple Security Vulnerabilities in Adobe Reader for Solaris 10 Ma (Avaya)
- FortiGuard Advisory (FGA-2009-25) Memory Corruption Vulnerability in Adobe Reade (Fortinet)
- Nortel Response to APSB09-07 Adobe Quarterly Security Update for June 2009 (Nortel Networks)