vendor:
Adobe Reader and Adobe Acrobat
by:
MC, Didier Stevens, jduck
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Adobe Reader and Adobe Acrobat
Affected Version From: < 7.1.1
Affected Version To: < 9.1
Patch Exists: NO
Related CWE: CVE-2009-0927
CPE: a:adobe:acrobat
Platforms Tested: Windows
2009
Adobe Collab.getIcon() Buffer Overflow
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat. Affected versions include < 7.1.1, < 8.1.3, and < 9.1. By creating a specially crafted pdf that a contains malformed Collab.getIcon() call, an attacker may be able to execute arbitrary code.
Mitigation:
Apply the latest security patches from Adobe.