Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files.

(CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 / CVE-2009-1062)

The version of Adobe Acrobat installed on the remote host is earlier than 9.1 / 8.1.4 / 7.1.1.  Such versions are reportedly affected by multiple vulnerabilities :

  - An integer buffer overflow can be triggered when     processing a malformed JBIG2 image stream with the     '/JBIG2Decode' filter. (CVE-2009-0658)

  - A vulnerability in the 'getIcon()' JavaScript method of     a Collab object could allow for remote code execution.
    (CVE-2009-0927)

  - Additional vulnerabilities involving handling of JBIG2     image streams could lead to remote code execution.
    (CVE-2009-0193, CVE-2009-0928, CVE-2009-1061,     CVE-2009-1062)

If an attacker can trick a user into opening a specially crafted PDF file, he can exploit these flaws to execute arbitrary code subject to the user's privileges.

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

Multiple input validation flaws were discovered in the JBIG2 compressed images decoder used by Adobe Reader. A malicious PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader. (CVE-2009-0193, CVE-2009-0658, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062)

All Adobe Reader users should install these updated packages. They contain Adobe Reader version 8.1.4, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files.

(CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062)

The remote host is affected by the vulnerability described in GLSA-200904-17 (Adobe Reader: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in Adobe Reader:
    Alin Rad Pop of Secunia Research reported a heap-based buffer overflow     when processing PDF files containing a malformed JBIG2 symbol     dictionary segment (CVE-2009-0193).
    A buffer overflow related to a non-JavaScript function call and     possibly an embedded JBIG2 image stream has been reported     (CVE-2009-0658).
    Tenable Network Security reported a stack-based buffer overflow that     can be triggered via a crafted argument to the getIcon() method of a     Collab object (CVE-2009-0927).
    Sean Larsson of iDefense Labs reported a heap-based buffer overflow     when processing a PDF file containing a JBIG2 stream with a size     inconsistency related to an unspecified table (CVE-2009-0928).
    Jonathan Brossard of the iViZ Security Research Team reported an     unspecified vulnerability related to JBIG2 and input validation     (CVE-2009-1061).
    Will Dormann of CERT/CC reported a vulnerability lading to memory     corruption related to JBIG2 (CVE-2009-1062).
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF     document, possibly leading to the execution of arbitrary code with the     privileges of the user running the application, or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Reader installed on the remote host is earlier than 9.1 / 8.1.4 / 7.1.1.  Such versions are reportedly affected by multiple vulnerabilities :

  - An integer buffer overflow can be triggered when     processing a malformed JBIG2 image stream with the     '/JBIG2Decode' filter. (CVE-2009-0658)

  - A vulnerability in the 'getIcon()' JavaScript method of     a Collab object could allow for remote code execution.     (CVE-2009-0927)

  - Additional vulnerabilities involving handling of JBIG2     image streams could lead to remote code execution.
    (CVE-2009-0193, CVE-2009-0928, CVE-2009-1061,     CVE-2009-1062)

If an attacker can trick a user into opening a specially crafted PDF file, these flaws can exploited to execute arbitrary code subject to the user's privileges.

ID	Name	Product	Family	Severity
51705	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6161)	Nessus	SuSE Local Security Checks	critical
51690	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)	Nessus	SuSE Local Security Checks	critical
41365	SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)	Nessus	SuSE Local Security Checks	critical
41362	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 690)	Nessus	SuSE Local Security Checks	critical
40803	Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities	Nessus	Windows	critical
40740	RHEL 3 / 4 / 5 : acroread (RHSA-2009:0376)	Nessus	Red Hat Local Security Checks	critical
40182	openSUSE Security Update : acroread (acroread-689)	Nessus	SuSE Local Security Checks	critical
39906	openSUSE Security Update : acroread (acroread-689)	Nessus	SuSE Local Security Checks	critical
36196	GLSA-200904-17 : Adobe Reader: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
36033	openSUSE 10 Security Update : acroread (acroread-6120)	Nessus	SuSE Local Security Checks	critical
35821	Adobe Reader < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2009-0928

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical