HTTP: Malicious Flash File printSeps Function Vulnerability

This signature detects attempts to exploit a known vulnerability in Adobe Reader. An attacker can create a malicious Web site with Web pages containing dangerous Adobe PDF Files, which if accessed by a victim, allows the attacker to gain control of the victim's client system.

Extended Description

Adobe Acrobat, Reader, and Flash are prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. The following products are affected: Adobe Flash Player 10.1.85.3 and prior for Windows, Mac OS X, Linux, and Solaris Adobe Flash Player 10.1.95.2 and prior for Android Adobe Reader 9.4 and prior for Windows, Mac OS X, and Unix Adobe Acrobat 9.4 and prior for Windows and Mac OS X

Affected Products

Google chrome

References

BugTraq: 44504

CVE: CVE-2010-3654

Short Name
HTTP:STC:ADOBE:PDF-PRINTSEPS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2010-3654 File Flash Function Malicious Vulnerability bid:44504 printSeps
Release Date
10/28/2010
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Red_hat

Google

Adobe

Apple

Gentoo

Sun

Macromedia

Suse

CVSS Score

9.3

Found a potential security threat?