HTTP: Adobe Acrobat and Adobe Reader FlateDecode Integer Overflow

This signature detects attempts to bypass security devices using the obfuscated value of the FlateDecode method in a PDF document. Attackers can bypass security devices by using this method.

Extended Description

Adobe Reader and Acrobat are prone to an integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. NOTE: This issue was previously covered in BID 35274 (Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.

Affected Products

Nortel_networks self-service_speech_server,Red_hat enterprise_linux_as_extras

References

BugTraq: 35294

CVE: CVE-2009-1856

Short Name

HTTP:STC:PDF-FLATEDECODE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Acrobat and Adobe Reader FlateDecode Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?