HTTP: Adobe Acrobat JavaScript getIcon Method Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Adobe Acrobat. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the Server.

Extended Description

Adobe Acrobat and Reader are prone to a remote code-execution vulnerability because the software fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. The issue affects the following: Reader and Acrobat 7.1 and prior Reader and Acrobat 8.1.2 and prior Reader and Acrobat 9 UPDATE (March 24, 2009): This BID was previously titled 'Adobe Acrobat and Reader Unspecified JavaScript Method Remote Code Execution Vulnerability', but has been updated to better document the issue.

Affected Products

Nortel_networks self-service_mps_1000,Adobe acrobat_professional

References

BugTraq: 34169

CVE: CVE-2009-0927

URL: http://www.zerodayinitiative.com/advisories/zdi-09-014/

Short Name

HTTP:STC:ADOBE:ACROBAT-GETICON

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Acrobat JavaScript getIcon Method Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?