HTTP: Adobe MIMETYPE in Embed/Object HTML Tag

This signature detects attempts to exploit a known vulnerability in Adobe Acrobat and Adobe Reader FireFox Plugin. An attacker can create a malicious Web site containing dangerous HTML Embed or Object tags, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Adobe Reader and Acrobat are prone to a remote code-execution vulnerability because they fail to properly handle certain COM objects. An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions. This issue was previously covered in BID 36638 (Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities), but has been given its own record to better document it.

Affected Products

Red_hat enterprise_linux_as_extras

References

BugTraq: 36668

CVE: CVE-2009-2983

Short Name

HTTP:STC:ADOBE:EMBED-OBJ-MIME

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Adobe MIMETYPE in Embed/Object HTML Tag

Extended Description

Affected Products

References

Found a potential security threat?