Signature Detail

HTTP: Adobe PDF DescendantFonts Recursive Loop Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Adobe Acrobat and Reader. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Adobe Acrobat and Reader are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Adobe Reader and Acrobat versions prior to and including 9.3.4 and 8.2.4 are affected.

Affected Products

• Adobe acrobat 7.0.0
• Adobe acrobat 7.0.1
• Adobe acrobat 7.0.2
• Adobe acrobat 7.0.3
• Adobe acrobat 7.0.9
• Adobe acrobat 7.1.2
• Adobe acrobat 8.1.5
• Adobe acrobat 8.2.2
• Adobe acrobat 8.2.3
• Adobe acrobat 8.2.4
• Adobe acrobat 9.1.1
• Adobe acrobat 9.2
• Adobe acrobat 9.3
• Adobe acrobat 9.3.1
• Adobe acrobat 9.3.2
• Adobe acrobat 9.3.3
• Adobe acrobat 9.3.3
• Adobe acrobat 9.3.4
• Adobe acrobat 9.3.4
• Adobe acrobat_professional 7.0.0
• Adobe acrobat_professional 7.0.1
• Adobe acrobat_professional 7.0.2
• Adobe acrobat_professional 7.0.3
• Adobe acrobat_professional 7.0.4
• Adobe acrobat_professional 7.0.5
• Adobe acrobat_professional 7.0.6
• Adobe acrobat_professional 7.0.7
• Adobe acrobat_professional 7.0.8
• Adobe acrobat_professional 7.0.9
• Adobe acrobat_professional 7.1
• Adobe acrobat_professional 7.1.1
• Adobe acrobat_professional 7.1.3
• Adobe acrobat_professional 7.1.4
• Adobe acrobat_professional 8.0
• Adobe acrobat_professional 8.1
• Adobe acrobat_professional 8.1.1
• Adobe acrobat_professional 8.1.2
• Adobe acrobat_professional 8.1.2 Security Update 1
• Adobe acrobat_professional 8.1.3
• Adobe acrobat_professional 8.1.4
• Adobe acrobat_professional 8.1.6
• Adobe acrobat_professional 8.1.7
• Adobe acrobat_professional 8.2
• Adobe acrobat_professional 8.2.1
• Adobe acrobat_professional 8.2.2
• Adobe acrobat_professional 8.2.4
• Adobe acrobat_professional 9
• Adobe acrobat_professional 9.1
• Adobe acrobat_professional 9.1.2
• Adobe acrobat_professional 9.1.3
• Adobe acrobat_professional 9.2
• Adobe acrobat_professional 9.3
• Adobe acrobat_professional 9.3.1
• Adobe acrobat_professional 9.3.2
• Adobe acrobat_professional 9.3.3
• Adobe acrobat_professional 9.3.4
• Adobe acrobat_standard 7.0.0
• Adobe acrobat_standard 7.0.1
• Adobe acrobat_standard 7.0.2
• Adobe acrobat_standard 7.0.3
• Adobe acrobat_standard 7.0.4
• Adobe acrobat_standard 7.0.5
• Adobe acrobat_standard 7.0.6
• Adobe acrobat_standard 7.0.7
• Adobe acrobat_standard 7.0.8
• Adobe acrobat_standard 7.1
• Adobe acrobat_standard 7.1.1
• Adobe acrobat_standard 7.1.3
• Adobe acrobat_standard 7.1.4
• Adobe acrobat_standard 8.0
• Adobe acrobat_standard 8.1
• Adobe acrobat_standard 8.1.1
• Adobe acrobat_standard 8.1.2
• Adobe acrobat_standard 8.1.3
• Adobe acrobat_standard 8.1.4
• Adobe acrobat_standard 8.1.6
• Adobe acrobat_standard 8.1.7
• Adobe acrobat_standard 8.2
• Adobe acrobat_standard 8.2.1
• Adobe acrobat_standard 8.2.2
• Adobe acrobat_standard 8.2.4
• Adobe acrobat_standard 9
• Adobe acrobat_standard 9.1
• Adobe acrobat_standard 9.1.2
• Adobe acrobat_standard 9.1.3
• Adobe acrobat_standard 9.2
• Adobe acrobat_standard 9.3
• Adobe acrobat_standard 9.3.1
• Adobe acrobat_standard 9.3.2
• Adobe acrobat_standard 9.3.3
• Adobe acrobat_standard 9.3.4
• Adobe acrobat_standard 9.3.4
• Adobe reader 7.0.0
• Adobe reader 7.0.1
• Adobe reader 7.0.2
• Adobe reader 7.0.3
• Adobe reader 7.0.4
• Adobe reader 7.0.5
• Adobe reader 7.0.6
• Adobe reader 7.0.7
• Adobe reader 7.0.8
• Adobe reader 7.0.9
• Adobe reader 7.1
• Adobe reader 7.1.1
• Adobe reader 7.1.2
• Adobe reader 7.1.3
• Adobe reader 7.1.4
• Adobe reader 8.0
• Adobe reader 8.1
• Adobe reader 8.1.1
• Adobe reader 8.1.2
• Adobe reader 8.1.2 Security Update 1
• Adobe reader 8.1.3
• Adobe reader 8.1.4
• Adobe reader 8.1.5
• Adobe reader 8.1.6
• Adobe reader 8.1.7
• Adobe reader 8.2
• Adobe reader 8.2.1
• Adobe reader 8.2.2
• Adobe reader 8.2.3
• Adobe reader 8.2.4
• Adobe reader 9
• Adobe reader 9.1
• Adobe reader 9.1.1
• Adobe reader 9.1.2
• Adobe reader 9.1.3
• Adobe reader 9.2
• Adobe reader 9.3
• Adobe reader 9.3.1
• Adobe reader 9.3.2
• Adobe reader 9.3.3
• Adobe reader 9.3.4
• Adobe reader 9.3.4
• Gentoo linux
• Red_hat desktop_extras 4
• Red_hat enterprise_linux_as_extras 4
• Red_hat enterprise_linux_desktop_supplementary 5 Client
• Red_hat enterprise_linux_es_extras 4
• Red_hat enterprise_linux_extras 4
• Red_hat enterprise_linux_supplementary 5 Server
• Red_hat enterprise_linux_ws_extras 4
• Suse moblin 2.0
• Suse moblin 2.1
• Suse suse_linux_enterprise 10 SP3
• Suse suse_linux_enterprise 11
• Suse suse_linux_enterprise 11 SP1

References

• BugTraq: 43724
• CVE: CVE-2010-3619