HTTP: Adobe PDF JPXDecode Vulnerability

This signature detects attempts to exploit a known vulnerability in Adobe Acrobat software. Attackers can send malicious PDF files to victims or direct them to a hostile Web server, which if the victim interacts with these files or servers, can result in remote code execution on the victim's system.

Extended Description

Adobe Reader and Acrobat are prone to a memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Reader and Acrobat 9.2 and prior versions. NOTE: This issue was previously covered in BID 37667 (Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities), but has been given its own record to better document it.

Affected Products

Nortel_networks self-service_media_processing_server,Red_hat enterprise_linux_as_extras

References

BugTraq: 37757

CVE: CVE-2009-3955

Short Name

HTTP:STC:ADOBE:PDF-JPXDECODE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe PDF JPXDecode Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?