Signature Detail

HTTP: Adobe Acrobat Reader U3D CLODMeshContinuation Code Execution

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat Reader U3D. A successful attack can lead to arbitrary code execution.

Extended Description

Adobe Reader and Acrobat are prone to a heap-based memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code within the context of the affected applications. Failed exploit attempts will result in a denial-of-service condition. This issue affects versions *prior to* Reader and Acrobat 7.1.4, 8.1.7, and 9.2. This issue was previously covered in BID 36638 (Adobe Reader and Acrobat October 2009 Multiple Remote Vulnerabilities), but has been given its own record to better document it.

Affected Products

• Adobe acrobat 7.0.0
• Adobe acrobat 7.0.1
• Adobe acrobat 7.0.2
• Adobe acrobat 7.0.3
• Adobe acrobat 9.1.1
• Adobe acrobat_3d 8.1.2
• Adobe acrobat_3d 8.1.3
• Adobe acrobat_3d
• Adobe acrobat_professional 7.0.0
• Adobe acrobat_professional 7.0.1
• Adobe acrobat_professional 7.0.2
• Adobe acrobat_professional 7.0.3
• Adobe acrobat_professional 7.0.4
• Adobe acrobat_professional 7.0.5
• Adobe acrobat_professional 7.0.6
• Adobe acrobat_professional 7.0.7
• Adobe acrobat_professional 7.0.8
• Adobe acrobat_professional 7.0.9
• Adobe acrobat_professional 7.1
• Adobe acrobat_professional 7.1.1
• Adobe acrobat_professional 7.1.3
• Adobe acrobat_professional 8.0
• Adobe acrobat_professional 8.1
• Adobe acrobat_professional 8.1.1
• Adobe acrobat_professional 8.1.2
• Adobe acrobat_professional 8.1.2 Security Update 1
• Adobe acrobat_professional 8.1.3
• Adobe acrobat_professional 8.1.4
• Adobe acrobat_professional 8.1.6
• Adobe acrobat_professional 9
• Adobe acrobat_professional 9.1
• Adobe acrobat_professional 9.1.2
• Adobe acrobat_professional 9.1.3
• Adobe acrobat_reader_(unix) 7.0.0
• Adobe acrobat_reader_(unix) 7.0.1
• Adobe acrobat_standard 7.0.0
• Adobe acrobat_standard 7.0.1
• Adobe acrobat_standard 7.0.2
• Adobe acrobat_standard 7.0.3
• Adobe acrobat_standard 7.0.4
• Adobe acrobat_standard 7.0.5
• Adobe acrobat_standard 7.0.6
• Adobe acrobat_standard 7.0.7
• Adobe acrobat_standard 7.0.8
• Adobe acrobat_standard 7.1
• Adobe acrobat_standard 7.1.1
• Adobe acrobat_standard 7.1.3
• Adobe acrobat_standard 8.0
• Adobe acrobat_standard 8.1
• Adobe acrobat_standard 8.1.1
• Adobe acrobat_standard 8.1.2
• Adobe acrobat_standard 8.1.3
• Adobe acrobat_standard 8.1.4
• Adobe acrobat_standard 8.1.6
• Adobe acrobat_standard 9
• Adobe acrobat_standard 9.1
• Adobe acrobat_standard 9.1.2
• Adobe acrobat_standard 9.1.3
• Adobe reader 7.0.0
• Adobe reader 7.0.1
• Adobe reader 7.0.2
• Adobe reader 7.0.3
• Adobe reader 7.0.4
• Adobe reader 7.0.5
• Adobe reader 7.0.6
• Adobe reader 7.0.7
• Adobe reader 7.0.8
• Adobe reader 7.0.9
• Adobe reader 7.1
• Adobe reader 7.1.1
• Adobe reader 7.1.2
• Adobe reader 7.1.3
• Adobe reader 8.0
• Adobe reader 8.1
• Adobe reader 8.1.1
• Adobe reader 8.1.2
• Adobe reader 8.1.2 Security Update 1
• Adobe reader 8.1.3
• Adobe reader 8.1.4
• Adobe reader 8.1.5
• Adobe reader 8.1.6
• Adobe reader 9
• Adobe reader 9.1
• Adobe reader 9.1.1
• Adobe reader 9.1.2
• Adobe reader 9.1.3
• Gentoo linux
• Red_hat desktop_extras 3
• Red_hat desktop_extras 4
• Red_hat enterprise_linux_as_extras 3
• Red_hat enterprise_linux_as_extras 4
• Red_hat enterprise_linux_desktop_supplementary 5 Client
• Red_hat enterprise_linux_es_extras 3
• Red_hat enterprise_linux_es_extras 4
• Red_hat enterprise_linux_extras 3
• Red_hat enterprise_linux_extras 4
• Red_hat enterprise_linux_supplementary 5 Server
• Red_hat enterprise_linux_ws_extras 3
• Red_hat enterprise_linux_ws_extras 4
• Sun solaris 10 Sparc
• Suse opensuse 10.3
• Suse opensuse 11.0
• Suse opensuse 11.1
• Suse suse_linux_enterprise_desktop 10 SP2
• Suse suse_linux_enterprise_desktop 10 SP3
• Suse suse_linux_enterprise_desktop 11

References

• BugTraq: 36671
• CVE: CVE-2009-2997
• CVE: CVE-2009-2990