This application requires Javascript for optimal performance.

Adobe.Acrobat.Reader.FlateDecode.Integer.Overflow

Release Date

Aug 20, 2009

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against an integer overflow vulnerability in Adobe Reader and Acrobat.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted PDF file. It allows a remote attacker to execute arbitrary code.

Affected Products

Adobe Acrobat and Reader versions prior to 9.1.2
Adobe Acrobat and Reader versions prior to 8.1.6
Adobe Acrobat and Reader versions prior to 7.1.3

Recommended Actions

Update to the latest versions:

http://www.adobe.com/support/security/bulletins/apsb09-07.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-1856

Reference/s

http://www.securityfocus.com/bid/35294 (BugTraq)
http://www.frsirt.com/english/advisories/2009/1547 (FrSIRT)

Reference: VID-17631