Signature Detail

HTTP: Adobe Acrobat Reader Malformed U3D Integer Overflow

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat and Reader. A successful attack can lead to arbitrary code execution.

Extended Description

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.

Affected Products

• adobe acrobat 3.0
• adobe acrobat 3.1
• adobe acrobat 4.0
• adobe acrobat 4.0.5
• adobe acrobat 4.0.5a
• adobe acrobat 4.0.5c
• adobe acrobat 5.0
• adobe acrobat 5.0.10
• adobe acrobat 5.0.5
• adobe acrobat 5.0.6
• adobe acrobat 6.0
• adobe acrobat 6.0.1
• adobe acrobat 6.0.2
• adobe acrobat 6.0.3
• adobe acrobat 6.0.4
• adobe acrobat 6.0.5
• adobe acrobat 6.0.6
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.2
• adobe acrobat 7.1.3
• adobe acrobat 7.1.4
• adobe acrobat 8.0.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat up to 9.2
• adobe acrobat_reader 3.0
• adobe acrobat_reader 3.01
• adobe acrobat_reader 3.02
• adobe acrobat_reader 4.0
• adobe acrobat_reader 4.0.5
• adobe acrobat_reader 4.0.5a
• adobe acrobat_reader 4.0.5c
• adobe acrobat_reader 4.5
• adobe acrobat_reader 5.0
• adobe acrobat_reader 5.0.10
• adobe acrobat_reader 5.0.11
• adobe acrobat_reader 5.0.5
• adobe acrobat_reader 5.0.6
• adobe acrobat_reader 5.0.7
• adobe acrobat_reader 5.0.9
• adobe acrobat_reader 5.1
• adobe acrobat_reader 6.0
• adobe acrobat_reader 6.0.1
• adobe acrobat_reader 6.0.2
• adobe acrobat_reader 6.0.3
• adobe acrobat_reader 6.0.4
• adobe acrobat_reader 6.0.5
• adobe acrobat_reader 7.0
• adobe acrobat_reader 7.0.1
• adobe acrobat_reader 7.0.2
• adobe acrobat_reader 7.0.3
• adobe acrobat_reader 7.0.4
• adobe acrobat_reader 7.0.5
• adobe acrobat_reader 7.0.6
• adobe acrobat_reader 7.0.7
• adobe acrobat_reader 7.0.8
• adobe acrobat_reader 7.0.9
• adobe acrobat_reader 7.1.0
• adobe acrobat_reader 7.1.1
• adobe acrobat_reader 7.1.2
• adobe acrobat_reader 7.1.3
• adobe acrobat_reader 8.0
• adobe acrobat_reader 8.1
• adobe acrobat_reader 8.1.1
• adobe acrobat_reader 8.1.2
• adobe acrobat_reader 8.1.4
• adobe acrobat_reader 8.1.5
• adobe acrobat_reader 8.1.6
• adobe acrobat_reader 8.1.7
• adobe acrobat_reader 9.0
• adobe acrobat_reader 9.1
• adobe acrobat_reader 9.1.1
• adobe acrobat_reader 9.1.2
• adobe acrobat_reader 9.1.3
• adobe acrobat_reader up to 9.2

References

• BugTraq: 37756
• CVE: CVE-2009-3959