Adobe Acrobat and Reader CVE-2010-0188 Remote Code Execution Vulnerability

Bugtraq ID:	38195
Class:	Boundary Condition Error
CVE:	CVE-2010-0188
Remote:	Yes
Local:	No
Published:	Feb 11 2010 12:00AM
Updated:	Sep 07 2010 09:12PM
Credit:	Microsoft Vulnerability Research Program (MSVR)
Vulnerable:	SuSE SUSE Linux Enterprise Desktop 10 SP3 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE Moblin 2.0 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux ES 4.8.z Red Hat Enterprise Linux EUS 5.4.z server Red Hat Enterprise Linux Desktop Supplementary 5 client Red Hat Enterprise Linux Desktop 5 client Gentoo Linux Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9 Adobe Reader 8.2 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.2 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.2 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 9.1.1 Adobe Acrobat 9.3 Adobe Acrobat 9.2
Not Vulnerable:	Adobe Reader 9.3.1 Adobe Reader 8.2.1 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 8.2.1 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 8.2.1

Adobe Acrobat and Reader CVE-2010-0188 Remote Code Execution Vulnerability

Adobe Acrobat and Reader are prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

The following products are affected:

Reader 9.3 for Windows, Macintosh, and UNIX
Acrobat 9.3 for Windows and Macintosh
Reader 8.2 for Windows and Macintosh
Acrobat 8.2 for Windows and Macintosh

NOTE: This BID was originally titled 'Adobe Acrobat and Reader APSB10-07 Unspecified Security Vulnerabilities' but has been updated with the release of the Adobe patches.

NOTE (February 19, 2010): Reports indicate that this issue may be related to the vulnerability discussed in BID 19283 (LibTIFF TiffFetchShortPair Remote Buffer Overflow Vulnerability). We will update this BID as more information emerges.

Adobe Acrobat and Reader CVE-2010-0188 Remote Code Execution Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Reports indicate that this issue is being actively exploited in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/38195.py

Adobe Acrobat and Reader CVE-2010-0188 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe Acrobat and Reader CVE-2010-0188 Remote Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• CVE-2010-0188: Patched Adobe Reader Vulnerability is Actively Exploited in the W (Microsoft)
  
• RHSA-2010:0114-1 (Red Hat)
  
• Adobe Security Advisory APSB10-07 (Adobe)