CVE-2009-0928: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table...

CVE-2009-1062: Improper Input Validation

Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061...

Adobe Acrobat Reader - JBIG2 Universal

Adobe Acrobat Reader - JBIG2 Universal Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500 write up: http://bl4cksecurity.blogspot.com/2009/03/adobe-acrobatreader-universal-exploit.html down: http://blacksecurity.org/download/66/AdobeJBIG2UniversalReaderAcrobatExploit back:...

Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500

Exploit for unknown platform in category local exploits ================================================================= Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500 ================================================================= back: http://inj3ct0r.com/sploits/692.zip...

Adobe Acrobat Reader - JBIG2 Universal

Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500 write up: http://bl4cksecurity.blogspot.com/2009/03/adobe-acrobatreader-universal-exploit.html down: http://blacksecurity.org/download/66/AdobeJBIG2UniversalReaderAcrobatExploit back:...

VulnCheck KEV: CVE-2007-5659

Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods...

Immunity Canvas: ACROBAT_JS4

Name| acrobatjs4 ---|--- CVE| CVE-2009-0927 Exploit Pack| CANVAS Description| acrobatjs4 Notes| CVE Name: CVE-2009-0927 VersionsAffected: Acrobat Reader =8.1.2 and =9.0 Repeatability: References: http://www.adobe.com/support/security/bulletins/apsb09-04.html Date public: 03/24/2009 CVE Url:...

Adobe Acrobat Reader JBIG2 Buffer Overflow

!/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = "\x40\x00"; my $factor = "ABCD"; my $data = "A" x 8314; print pdf; sub pdf "%PDF-1.5\n" . "%\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n" . "3 0 \n" . "xref\n" . "3 16\n"...

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)

!/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = "\x40\x00"; my $factor = "ABCD"; my $data = "A" x 8314; print pdf; sub pdf "%PDF-1.5\n" . "%\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n" . "3 0 \n" . "xref\n" . "3 16\n"...

Immunity Canvas: ACROBAT_JBIG

Name| acrobatjbig ---|--- CVE| CVE-2009-0658 Exploit Pack| CANVAS Description| Adobe Acrobat Reader 9.0 JBIG Parser Stack Overwrite Notes| CVE Name: CVE-2009-0658 VENDOR: Adobe Notes: Not to be used from IE via the HTTP Server as memory moves around too much. Instead, generate a PDF file and emai...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5746)

The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992 / CVE-2008-2549 / CVE-2008-4812 / CVE-2008-4813 / CVE-2008-4817 / CVE-2008-4816 / CVE-2008-4814 / CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...

acroread: crash and possible code execution

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf...

Reader: Download Manager input validation flaw

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption...

NOS GetPlus download manager ActiveX buffer overflow / Acrobat Reader

No description provided...

Adobe Acrobat和Reader 8.1.2多个安全漏洞

BUGTRAQ ID: 32100 CVE ID：CVE-2008-4812 CVE-2008-4813 CVE-2008-4814 CVE-2008-4815 Adobe Acrobat和Reader是PDF文件格式处理程序。 Adobe Acrobat和Reader存在多个安全问题，远程攻击者可以利用漏洞执行任意代码或提升特权等攻击。 -当处理包含在PDF文档中的恶意JavaScript时存在缺陷，当建立Collab对象并在之上执行特定序列操作时，存在内存破坏可导致任意代码执行。...

CVE-2008-4817: Improper Input Validation

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption...

Gentoo Security Advisory GLSA 200412-12 (acroread)

The remote host is missing updates announced in advisory GLSA 200412-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-16 (acroread)

The remote host is missing updates announced in advisory GLSA 200701-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-16 (acroread)

The remote host is missing updates announced in advisory GLSA 200701-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200803-26 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...