Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

Bugtraq ID:	36686
Class:	Input Validation Error
CVE:	CVE-2009-2979
Remote:	Yes
Local:	No
Published:	Oct 13 2009 12:00AM
Updated:	May 12 2015 07:48PM
Credit:	Didier Stevens
Vulnerable:	SuSE Suse Linux Enterprise Desktop 11 SuSE Suse Linux Enterprise Desktop 10 SP3 SuSE Suse Linux Enterprise Desktop 10 SP2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Gentoo Linux Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 3D 8.1.3 Adobe Acrobat 3D 8.1.2 Adobe Acrobat 9.1.1
Not Vulnerable:	Adobe Reader 8.1.7 Adobe Reader 9.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 9.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 9.2

Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

Adobe Reader and Acrobat are prone to a denial-of-service vulnerability.

Successfully exploiting this issue may allow attackers to crash the affected applications, denying service to legitimate users.

This issue affects versions *prior to* Reader and Acrobat 8.1.7, and 9.2.

This issue was previously covered in BID 36638 (Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities), but has been given its own record to better document it.

Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

Attackers can exploit this issue by tricking a victim into opening a malicious file.

The reporter of the issue has created a functional exploit. Please see the references for more information.

Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.


S.u.S.E. openSUSE 11.1

• S.u.S.E. acroread-8.1.7-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/acroread-8.1.7-0.1.1 .i586.rpm

S.u.S.E. openSUSE 11.0

• S.u.S.E. acroread-8.1.7-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/acroread-8.1.7-0.1.i 586.rpm

Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service Vulnerability

References:

• Adobe Homepage (Adobe)
  
• CVE-2009-2979 Or The XML-Bombed PDF (Didier Stevens)
  
• APSB09-15 Security Advisory for Adobe Reader and Acrobat (Adobe)