This application requires Javascript for optimal performance.

Adobe.Acrobat.Reader.Tiff.Buffer.Overflow

Release Date

Feb 11, 2010

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt to exploit a remote code-execution vulnerability in Adobe Acrobat and Reader.

The vulnerability is caused by an error when parsing a TIFF image embedded in an PDF file.

Affected Products

Adobe Reader 9.3 and earlier versions
Adobe Acrobat 9.3 and earlier versions

Recommended Actions

Refer to the vendor's web site for the suggested workaround:
http://www.adobe.com/support/security/bulletins/apsb10-07.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-0188

Reference/s

http://www.exploit-db.com/exploits/11787
http://www.securityfocus.com/bid/38195 (BugTraq)
http://www.adobe.com/support/security/bulletins/apsb10-07.html

Reference: VID-18211