Signature Detail
Short Name |
HTTP:STC:ADOBE:READER-ICC-RCE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Adobe Acrobat Reader ICC Stream Remote Code Execution (APSB10-21) |
Release Date |
2014/02/28 |
Update Number |
1806 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Adobe Acrobat Reader ICC Stream Remote Code Execution (APSB10-21)
This signature detects attempts to exploit a known vulnerability in Adobe Acrobat Reader. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the client.
Extended Description
Adobe Acrobat and Reader are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Adobe Reader and Acrobat versions prior to and including 9.3.4 and 8.2.4 are affected.
Affected Products
- Adobe Acrobat 7.0.0
- Adobe Acrobat 7.0.1
- Adobe Acrobat 7.0.2
- Adobe Acrobat 7.0.3
- Adobe Acrobat 7.0.9
- Adobe Acrobat 7.1.2
- Adobe Acrobat 8.1.5
- Adobe Acrobat 8.2.2
- Adobe Acrobat 8.2.3
- Adobe Acrobat 8.2.4
- Adobe Acrobat 9.1.1
- Adobe Acrobat 9.2
- Adobe Acrobat 9.3
- Adobe Acrobat 9.3.1
- Adobe Acrobat 9.3.2
- Adobe Acrobat 9.3.3
- Adobe Acrobat 9.3.3
- Adobe Acrobat 9.3.4
- Adobe Acrobat 9.3.4
- Adobe Acrobat Professional 7.0.0
- Adobe Acrobat Professional 7.0.1
- Adobe Acrobat Professional 7.0.2
- Adobe Acrobat Professional 7.0.3
- Adobe Acrobat Professional 7.0.4
- Adobe Acrobat Professional 7.0.5
- Adobe Acrobat Professional 7.0.6
- Adobe Acrobat Professional 7.0.7
- Adobe Acrobat Professional 7.0.8
- Adobe Acrobat Professional 7.0.9
- Adobe Acrobat Professional 7.1
- Adobe Acrobat Professional 7.1.1
- Adobe Acrobat Professional 7.1.3
- Adobe Acrobat Professional 7.1.4
- Adobe Acrobat Professional 8.0
- Adobe Acrobat Professional 8.1
- Adobe Acrobat Professional 8.1.1
- Adobe Acrobat Professional 8.1.2
- Adobe Acrobat Professional 8.1.2 Security Update 1
- Adobe Acrobat Professional 8.1.3
- Adobe Acrobat Professional 8.1.4
- Adobe Acrobat Professional 8.1.6
- Adobe Acrobat Professional 8.1.7
- Adobe Acrobat Professional 8.2
- Adobe Acrobat Professional 8.2.1
- Adobe Acrobat Professional 8.2.2
- Adobe Acrobat Professional 8.2.4
- Adobe Acrobat Professional 9
- Adobe Acrobat Professional 9.1
- Adobe Acrobat Professional 9.1.2
- Adobe Acrobat Professional 9.1.3
- Adobe Acrobat Professional 9.2
- Adobe Acrobat Professional 9.3
- Adobe Acrobat Professional 9.3.1
- Adobe Acrobat Professional 9.3.2
- Adobe Acrobat Professional 9.3.3
- Adobe Acrobat Professional 9.3.4
- Adobe Acrobat Standard 7.0.0
- Adobe Acrobat Standard 7.0.1
- Adobe Acrobat Standard 7.0.2
- Adobe Acrobat Standard 7.0.3
- Adobe Acrobat Standard 7.0.4
- Adobe Acrobat Standard 7.0.5
- Adobe Acrobat Standard 7.0.6
- Adobe Acrobat Standard 7.0.7
- Adobe Acrobat Standard 7.0.8
- Adobe Acrobat Standard 7.1
- Adobe Acrobat Standard 7.1.1
- Adobe Acrobat Standard 7.1.3
- Adobe Acrobat Standard 7.1.4
- Adobe Acrobat Standard 8.0
- Adobe Acrobat Standard 8.1
- Adobe Acrobat Standard 8.1.1
- Adobe Acrobat Standard 8.1.2
- Adobe Acrobat Standard 8.1.3
- Adobe Acrobat Standard 8.1.4
- Adobe Acrobat Standard 8.1.6
- Adobe Acrobat Standard 8.1.7
- Adobe Acrobat Standard 8.2
- Adobe Acrobat Standard 8.2.1
- Adobe Acrobat Standard 8.2.2
- Adobe Acrobat Standard 8.2.4
- Adobe Acrobat Standard 9
- Adobe Acrobat Standard 9.1
- Adobe Acrobat Standard 9.1.2
- Adobe Acrobat Standard 9.1.3
- Adobe Acrobat Standard 9.2
- Adobe Acrobat Standard 9.3
- Adobe Acrobat Standard 9.3.1
- Adobe Acrobat Standard 9.3.2
- Adobe Acrobat Standard 9.3.3
- Adobe Acrobat Standard 9.3.4
- Adobe Acrobat Standard 9.3.4
- Adobe Reader 7.0.0
- Adobe Reader 7.0.1
- Adobe Reader 7.0.2
- Adobe Reader 7.0.3
- Adobe Reader 7.0.4
- Adobe Reader 7.0.5
- Adobe Reader 7.0.6
- Adobe Reader 7.0.7
- Adobe Reader 7.0.8
- Adobe Reader 7.0.9
- Adobe Reader 7.1
- Adobe Reader 7.1.1
- Adobe Reader 7.1.2
- Adobe Reader 7.1.3
- Adobe Reader 7.1.4
- Adobe Reader 8.0
- Adobe Reader 8.1
- Adobe Reader 8.1.1
- Adobe Reader 8.1.2
- Adobe Reader 8.1.2 Security Update 1
- Adobe Reader 8.1.3
- Adobe Reader 8.1.4
- Adobe Reader 8.1.5
- Adobe Reader 8.1.6
- Adobe Reader 8.1.7
- Adobe Reader 8.2
- Adobe Reader 8.2.1
- Adobe Reader 8.2.2
- Adobe Reader 8.2.3
- Adobe Reader 8.2.4
- Adobe Reader 9
- Adobe Reader 9.1
- Adobe Reader 9.1.1
- Adobe Reader 9.1.2
- Adobe Reader 9.1.3
- Adobe Reader 9.2
- Adobe Reader 9.3
- Adobe Reader 9.3.1
- Adobe Reader 9.3.2
- Adobe Reader 9.3.3
- Adobe Reader 9.3.4
- Adobe Reader 9.3.4
- Gentoo Linux
- Red Hat Desktop Extras 4
- Red Hat Enterprise Linux AS Extras 4
- Red Hat Enterprise Linux Desktop Supplementary 5 Client
- Red Hat Enterprise Linux ES Extras 4
- Red Hat Enterprise Linux Extras 4
- Red Hat Enterprise Linux Supplementary 5 Server
- Red Hat Enterprise Linux WS Extras 4
- SuSE Moblin 2.0
- SuSE Moblin 2.1
- SuSE SUSE Linux Enterprise 10 SP3
- SuSE SUSE Linux Enterprise 11
- SuSE SUSE Linux Enterprise 11 SP1
References
- BugTraq: 43729
- BugTraq: 43726
- CVE: CVE-2010-3622
- CVE: CVE-2010-3621