HTTP: PDF U3D RHAdobeMeta Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Adobe Acrobat. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Adobe Reader and Acrobat are prone to a remote stack-based buffer-overflow vulnerability because they fail to adequately bounds-check user-supplied data. An attacker can exploit this issue by tricking a victim into opening a malicious file to execute arbitrary code and to cause denial-of-service conditions. NOTE: This issue was previously covered in BID 35274 (Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.

Affected Products

Nortel_networks self-service_speech_server,Red_hat enterprise_linux_as_extras

References

BugTraq: 35282

CVE: CVE-2009-1855

Short Name

HTTP:STC:ADOBE:PDF-U3D-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: PDF U3D RHAdobeMeta Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?