Short Name |
HTTP:STC:ADOBE:PDF-OPENACTION |
---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
OpenAction JavaScript in Adobe PDF |
Release Date |
2009/04/30 |
Update Number |
1419 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects a OpenAction JavaScript parameter in PDF files sent via HTTP. The OpenAction parameter defines what action should occur when the document is opened. By specifying that a JavaScript program be run, an attacker could write malicious JavaScript that would execute when a user tried to read the PDF file. Some known cases resulted in remote arbitrary code execution.
Adobe Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. Reader 8.1.4 and 9.1 for Linux are vulnerable; other versions or platforms may also be affected. UPDATE (April 28, 2009): The vendor is investigating this issue. We will update this BID as more information emerges. UPDATE (May 1, 2009): The vendor indicates that fixes will be available by May 12, 2009. Please see the referenced advisory for more information. UPDATE (May 18, 2009): The vendor indicates that fixes for Adobe Reader 7 for Apple Mac OS X will be available by the end of June, 2009. Please see the updated advisory for more information.