Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability

Bugtraq ID:	37758
Class:	Boundary Condition Error
CVE:	CVE-2009-3953
Remote:	Yes
Local:	No
Published:	Jan 12 2010 12:00AM
Updated:	Sep 07 2010 09:12PM
Credit:	Parvez Anwar
Vulnerable:	SuSE Suse Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Desktop Extras 4 Redhat Desktop Extras 3 Gentoo Linux Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.0.9 Adobe Reader 6.0.1 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1 Adobe Reader 8.0 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 9.1.1 Adobe Acrobat 7.0.9 Adobe Acrobat 6.0.1 Adobe Acrobat 9.2
Not Vulnerable:	Adobe Reader 9.3 Adobe Reader 8.2 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 8.2 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 8.2 Adobe Acrobat 9.3

Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability

Adobe Reader and Acrobat are prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects Reader and Acrobat 9.2 and prior versions.

NOTE: This issue was previously covered in BID 37667 (Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities), but has been given its own record to better document it.

Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability

A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.

A Metasploit exploit module is available.

• /data/vulnerabilities/exploits/37758.rb

Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


S.u.S.E. openSUSE 11.0

• S.u.S.E. acroread-9.3-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/acroread-9.3-0.1.i58 6.rpm

S.u.S.E. openSUSE 11.1

• S.u.S.E. acroread-9.3-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/acroread-9.3-0.1.1.i 586.rpm

S.u.S.E. openSUSE 11.2

• S.u.S.E. acroread-9.3-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.2/rpm/i586/acroread-9.3-0.1.1.i 586.rpm

Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• APSB10-02 Security Advisory for Adobe Reader and Acrobat (Adobe)