Skip to Content.
Sympa Menu

sm-security - [SM-Security] Acrobat and Adobe Reader plug-in buffer overflow

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas HOUSSIN <thomas.houssin AT gmail.com>
  • To: sm-security <sm-security AT lists.ibiblio.org>
  • Subject: [SM-Security] Acrobat and Adobe Reader plug-in buffer overflow
  • Date: Mon, 22 Aug 2005 12:07:45 +0200

Synopsis
========
Adobe Reader is vulnerable to a buffer overflow which could
potentially lead to execution of arbitrary code.

Background
==========
Acrobat Reader is a software for viewing and printing Adobe PDF files.

Description
===========
CAN-2005-2470:
Buffer overflow in a "core application plug-in" for Adobe Reader
allows attackers to cause a denial of service (crash) and possibly
execute arbitrary code via unknown vectors.

Impact
======
An attacker may create a specially-crafted PDF file, enticing a user
to open it. This could trigger a buffer overflow as the file is being
loaded, resulting in the execution of arbitrary code.

Affected packages
=================
acroread in z-rejected grimoire is affected. This is now fixed in
z-rejected grimoire.

Resolution
==========
All acroread users should upgrade to the latest available version:
# scribe update
# cast -c acroread

References
==========
[ 1 ] CAN-2005-2470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2470
[ 2 ] Security Advisory: Acrobat and Adobe Reader plug-in buffer overflow
http://www.adobe.com/support/techdocs/321644.html
[ 3 ] GLSA 200508-11
http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml


--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36



  • [SM-Security] Acrobat and Adobe Reader plug-in buffer overflow, Thomas HOUSSIN, 08/22/2005

Archive powered by MHonArc 2.6.24.

Top of Page