Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
BID:37756
Info
Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
| Bugtraq ID: | 37756 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-3959 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 12 2010 12:00AM |
| Updated: | Feb 01 2010 09:31PM |
| Credit: | Nicolas Joly of VUPEN Security |
| Vulnerable: |
SuSE Suse Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service Media Processing Server 0 Nortel Networks CallPilot 703t Nortel Networks CallPilot 600r Nortel Networks CallPilot 201i Nortel Networks CallPilot 200i Nortel Networks CallPilot 1005r Nortel Networks CallPilot 1002rp Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 9.1.1 Adobe Acrobat 9.2 |
| Not Vulnerable: |
Adobe Reader 9.3 Adobe Reader 8.2 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 8.2 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 8.2 Adobe Acrobat 9.3 |
Discussion
Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
Adobe Reader and Acrobat are prone to a remote code-execution vulnerability.
An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.
NOTE: This issue was previously covered in BID 37667 (Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities), but has been given its own record to better document it.
Adobe Reader and Acrobat are prone to a remote code-execution vulnerability.
An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.
NOTE: This issue was previously covered in BID 37667 (Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities), but has been given its own record to better document it.
Exploit / POC
Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 11.1
S.u.S.E. openSUSE 11.2
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.0
-
S.u.S.E. acroread-9.3-0.1.i586.rpm
http://download.opensuse.org/update/11.0/rpm/i586/acroread-9.3-0.1.i58 6.rpm
S.u.S.E. openSUSE 11.1
-
S.u.S.E. acroread-9.3-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/acroread-9.3-0.1.1.i 586.rpm
S.u.S.E. openSUSE 11.2
-
S.u.S.E. acroread-9.3-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/acroread-9.3-0.1.1.i 586.rpm
References
Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- Avaya Enterprise (Fomerly Nortel Enterprise) Response to Adobe Security Bulletin (Nortel Networks)
- VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerab ("VUPEN Security Research"
- APSB10-02 Security Advisory for Adobe Reader and Acrobat (Adobe)