HTTP: Adobe Reader Font Parsing Integer Overflow

This signature detects attempts to exploit a known code execution vulnerability in Adobe Reader and Adobe Acrobat. It is due to an integer overflow error within the CoolType.dll module when handling a PDF document embedding a TrueType Font(TTF) with a crafted maxCompositePoints field in a maxp table. Remote attackers can exploit this by enticing target users to open a malicious PDF document. Successful exploitation can result in arbitrary code execution in the context of the logged on user.

Extended Description

Adobe Acrobat and Reader are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. The following products are affected: Adobe Reader 9.3.3 and prior Adobe Acrobat 9.3.3 and prior Adobe Reader 8.2.3 and prior Acrobat 8.2.3 and prior

Affected Products

Red_hat enterprise_linux_as_extras

References

BugTraq: 42203

CVE: CVE-2010-2862

Short Name

HTTP:STC:ADOBE:READER-FONT-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Reader Font Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?