Vulnerability details :
 
Adobe Acrobat Reader mailListIsPdf() Function Remote Overflow 
 
     Fiche

Fiche créée le 2004-12-15 12:08:39, dernière mise à jour le 2010-03-11 06:36:56

A remote overflow exists in Adobe Acrobat Reader. The Adobe Acrobat Reader fails to validate the mailListIsPdf() function resulting in a buffer overflow. With a specially crafted request, an attacker can cause execute arbitrary code resulting in a loss of integrity.



 
Adobe Systems Incorporated    5.0.9  Affected
 
Attack Type :  Input Manipulation
 XSS, SQL injection, file retrieval, directory traversal, overflows, URL encoding.
 Découvert le 2004-12-14 12:11:27
 
Exploit :  Exploit Unknown
 Unsure of exploit status.
 Exploit découvert le 1970-01-01 07:00:00
 
Impact :  Loss of Integrity
 Assurance that data is unaltered by unauthorized persons. Examples: XSS, arbitrary command execution, most overflows, most format strings, SQL injection, unauthorized file modification/deletion/creation, remote file inclusion, etc.
 
Location :  Remote / Network Access
 If network access if required and exploit can be done remotely.
 
Solution :  Third-Party Solution

 Upgrade to version 5.0.10 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
 Solution découverte le 1970-01-01 07:00:00
 
 
External refs :
OSVDB  12397
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
 
 
 
 

 

 


Free consultation (search)
 
  Fill one or some of the fields below :
   
Vendor
 
Title
 
Vulnerability ref.
 
 
   
 
   
Individual alerts
 
You determine with one profile dynamic and assisted, all your material and software equipment.
We shall inform you then automatically, as soon as a notification of security will concern one or several elements of it profile.
Every notification is definite, consists of numerous information to determine risk and to protect itself from it.
 
Login:
Pass:
 
Free online subscription
© Power4Security.com - BMS Ltd UK 2007-2008 - powered by Power4Website.com