Signature Detail

HTTP: Adobe PDF Colors Field Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Adobe Acrobat. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the specified user.

Extended Description

Adobe Acrobat Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue by supplying a malicious PDF file. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.

Affected Products

• Adobe acrobat 7.0.0
• Adobe acrobat 7.0.1
• Adobe acrobat 7.0.2
• Adobe acrobat 7.0.3
• Adobe acrobat 9.1.1
• Adobe acrobat_professional 7.0.0
• Adobe acrobat_professional 7.0.1
• Adobe acrobat_professional 7.0.2
• Adobe acrobat_professional 7.0.3
• Adobe acrobat_professional 7.0.4
• Adobe acrobat_professional 7.0.5
• Adobe acrobat_professional 7.0.6
• Adobe acrobat_professional 7.0.7
• Adobe acrobat_professional 7.0.8
• Adobe acrobat_professional 7.0.9
• Adobe acrobat_professional 7.1
• Adobe acrobat_professional 7.1.1
• Adobe acrobat_professional 7.1.3
• Adobe acrobat_professional 8.0
• Adobe acrobat_professional 8.1
• Adobe acrobat_professional 8.1.1
• Adobe acrobat_professional 8.1.2
• Adobe acrobat_professional 8.1.2 Security Update 1
• Adobe acrobat_professional 8.1.3
• Adobe acrobat_professional 8.1.4
• Adobe acrobat_professional 8.1.6
• Adobe acrobat_professional 9
• Adobe acrobat_professional 9.1
• Adobe acrobat_professional 9.1.2
• Adobe acrobat_professional 9.1.3
• Adobe acrobat_standard 7.0.0
• Adobe acrobat_standard 7.0.1
• Adobe acrobat_standard 7.0.2
• Adobe acrobat_standard 7.0.3
• Adobe acrobat_standard 7.0.4
• Adobe acrobat_standard 7.0.5
• Adobe acrobat_standard 7.0.6
• Adobe acrobat_standard 7.0.7
• Adobe acrobat_standard 7.0.8
• Adobe acrobat_standard 7.1
• Adobe acrobat_standard 7.1.1
• Adobe acrobat_standard 7.1.3
• Adobe acrobat_standard 8.0
• Adobe acrobat_standard 8.1
• Adobe acrobat_standard 8.1.1
• Adobe acrobat_standard 8.1.2
• Adobe acrobat_standard 8.1.3
• Adobe acrobat_standard 8.1.4
• Adobe acrobat_standard 8.1.6
• Adobe acrobat_standard 9
• Adobe acrobat_standard 9.1
• Adobe acrobat_standard 9.1.2
• Adobe acrobat_standard 9.1.3
• Adobe reader 7.0.0
• Adobe reader 7.0.1
• Adobe reader 7.0.2
• Adobe reader 7.0.3
• Adobe reader 7.0.4
• Adobe reader 7.0.5
• Adobe reader 7.0.6
• Adobe reader 7.0.7
• Adobe reader 7.0.8
• Adobe reader 7.0.9
• Adobe reader 7.1
• Adobe reader 7.1.1
• Adobe reader 7.1.2
• Adobe reader 8.0
• Adobe reader 8.1
• Adobe reader 8.1.1
• Adobe reader 8.1.2
• Adobe reader 8.1.2 Security Update 1
• Adobe reader 8.1.3
• Adobe reader 8.1.4
• Adobe reader 8.1.5
• Adobe reader 8.1.6
• Adobe reader 9
• Adobe reader 9.1
• Adobe reader 9.1.1
• Adobe reader 9.1.2
• Adobe reader 9.1.3
• Gentoo linux
• Red_hat desktop_extras 3
• Red_hat desktop_extras 4
• Red_hat enterprise_linux_as_extras 3
• Red_hat enterprise_linux_as_extras 4
• Red_hat enterprise_linux_desktop_supplementary 5 Client
• Red_hat enterprise_linux_es_extras 3
• Red_hat enterprise_linux_es_extras 4
• Red_hat enterprise_linux_extras 3
• Red_hat enterprise_linux_extras 4
• Red_hat enterprise_linux_supplementary 5 Server
• Red_hat enterprise_linux_ws_extras 3
• Red_hat enterprise_linux_ws_extras 4
• Sun solaris 10 Sparc
• Suse opensuse 10.3
• Suse opensuse 11.0
• Suse opensuse 11.1
• Suse suse_linux_enterprise_desktop 10 SP2
• Suse suse_linux_enterprise_desktop 10 SP3
• Suse suse_linux_enterprise_desktop 11

References

• BugTraq: 36600
• CVE: CVE-2009-3459