RETIRED: Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities

Bugtraq ID:	36638
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 08 2009 12:00AM
Updated:	Oct 14 2009 09:58PM
Credit:	Didier Stevens, Drew Yao of Apple Product Security, Stefano Di Paola of Minded Security, Guillaume Delugré and Frédéric Raynal of SOGETI ESEC, SkyLined of Google Inc, Tavis Ormandy Google Security Team, An anonymous researc
Vulnerable:	Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.1.3 Adobe Reader 7.1.2 Adobe Reader 7.1.1 Adobe Reader 7.0.9 Adobe Reader 7.0.9 Adobe Reader 7.0.8 Adobe Reader 7.0.8 Adobe Reader 7.0.7 Adobe Reader 7.0.6 Adobe Reader 7.0.5 Adobe Reader 7.0.4 Adobe Reader 7.0.3 Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 7.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Reader (UNIX) 7.0.1 Adobe Acrobat Reader (UNIX) 7.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.3 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 Adobe Acrobat 3D 8.1.3 Adobe Acrobat 3D 8.1.2 Adobe Acrobat 3D 0 Adobe Acrobat 9.1.1 Adobe Acrobat 7.0.3 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0
Not Vulnerable:	Adobe Reader 8.1.7 Adobe Reader 7.1.4 Adobe Reader 9.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 7.1.4 Adobe Acrobat Standard 9.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 7.1.4 Adobe Acrobat Professional 9.2

RETIRED: Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities

Adobe has released an advisory for Acrobat and Reader that addresses 24 new security issues.

Successfully exploiting these issues may allow attackers to crash the affected application, execute arbitrary code within the context of the application, bypass certain security restrictions, and compromise the affected computer. Other attacks are also possible.

These issues affect versions *prior to* Reader and Acrobat 7.1.4, 8.1.7, and 9.2.

The following individual records now exist to document these issues:

36664 Adobe Reader and Acrobat Multiple Input Validation Vulnerabilities
36665 Adobe Reader and Acrobat U3D File Invalid Array Index Remote Vulnerability
36667 Adobe Reader and Acrobat Compact Font Format Heap Memory Corruption Vulnerability
36668 Adobe Reader and Acrobat COM Objects Memory Corruption Remote Code Execution Vulnerability
36669 Adobe Acrobat Reader Firefox Plugin Memory Corruption Remote Code Execution Vulnerability
36671 Adobe Reader and Acrobat Malformed U3D Data Heap Memory Corruption Vulnerability
36677 Adobe Reader and Acrobat U3D File Pointer Overwrite Remote Vulnerability
36678 Adobe Reader and Acrobat Malformed U3D Data Pointer Dereference Memory Corruption Vulnerability
36683 Adobe Reader and Acrobat JavaScript Memory Corruption Vulnerability
36682 Adobe Reader and Acrobat 'annots.api' Denial of Service Vulnerability
36680 Adobe Reader and Acrobat 'AcroPDF.dll' ActiveX Control Denial of Service Vulnerability
36681 Adobe Reader and Acrobat JavaScript Collab Object Memory Corruption Vulnerability
36686 Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability
36687 Adobe Reader and Acrobat Unspecified Integer Overflow Memory Corruption Vulnerability
36688 Adobe Reader and Acrobat Certificate Modification Vulnerability
36689 Adobe Reader and Acrobat (CVE-2009-2994) Buffer Overflow Vulnerability
36690 Adobe Reader and Acrobat Multiple Unspecified Heap-Based Overflow Vulnerabilities
36691 Adobe Acrobat Image Decoder Remote Code Execution Vulnerability
36692 Adobe Reader and Acrobat Trust Manager Remote Security Bypass Vulnerability
36693 Adobe Acrobat Integer Overflow Vulnerability
36694 Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
36695 Adobe Reader and Acrobat (CVE-2009-2992) ActiveX Control Denial of Service Vulnerability
36696 Adobe Reader and Acrobat for Unix Debug Mode Remote Code Execution Vulnerability
36697 Adobe Reader and Acrobat File Extension Controls Remote Security Bypass Vulnerability

RETIRED: Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may not require complex exploit code and may be trivial to exploit.

RETIRED: Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

RETIRED: Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Pre-Notification - Quarterly Security Update for Adobe Reader and Acrobat (Adobe Product Security Incident Response Team)
  
• APSB09-15 Security Advisory for Adobe Reader and Acrobat (Adobe)
  
• APSB09-15 Security Updates Available for Adobe Reader and Acrobat (Adobe)
  
• Security Advisory for Adobe Reader and Acrobat (Adobe)