This application requires Javascript for optimal performance.

Adobe.Acrobat.U3D.RHAdobeMeta.Buffer.Overflow

Release Date

Aug 18, 2009

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a buffer overflow vulnerability in Adobe Reader and Acrobat.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted PDF file. It allows a remote attacker to execute arbitrary code.

Affected Products

Adobe Acrobat and Reader versions prior to 9.1.2
Adobe Acrobat and Reader versions prior to 8.1.6
Adobe Acrobat and Reader versions prior to 7.1.3

Recommended Actions

Upgrade to the latest version, available from the web site:
http://www.adobe.com/support/security/bulletins/apsb09-07.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-1855

Reference/s

http://www.securityfocus.com/bid/35282 (BugTraq)
http://www.frsirt.com/english/advisories/2009/1547 (FrSIRT)

Reference: VID-17622