Adobe Reader U3D Memory Corruption Vulnerability

This module exploits a vulnerability in the U3D handling within versions 9.x through 9.4.6 and 10 through to 10.1.1 of Adobe Reader. The vulnerability is due to the use of uninitialized memory. Arbitrary code execution is achieved by embedding specially crafted U3D data into a PDF document. A hea...

ZDI-11-300 : Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability

ZDI-11-300 : Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-300 October 26, 2011 -- CVE ID: CVE-2011-2433 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Reader --...

Adobe Acrobat和Reader U3D IFF RGBA解析远程代码执行漏洞

BUGTRAQ ID: 49578 CVE ID: CVE-2011-2436 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。...

Adobe Reader U3D PICT 0Eh远程代码执行漏洞(CVE-2011-2434)

BUGTRAQ ID: 49577 CVE ID: CVE-2011-2434 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。...

Adobe Reader U3D PCX解析远程代码执行漏洞

BUGTRAQ ID: 49579 CVE ID: CVE-2011-2437 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。...

Adobe Acrobat和Reader U3D Tiff远程缓冲区溢出漏洞

BUGTRAQ ID: 49572 CVE ID: CVE-2011-2432 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在包含的libtiff实现上存在堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Adobe Reader...

Adobe Reader U3D IFF RGBA Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image...

Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within because Adobe...

Adobe Reader U3D PICT 0Eh Encoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Adobe handl...

Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Adobe handl...

Adobe Reader U3D PCX Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image...

Buffer overflow

Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2432

Adobe Reader/Acrobat is affected by a buffer overflow in the U3D TIFF Resource that can allow arbitrary code execution. Affected product ranges include Acrobat/Reader 8.x prior to 8.3.1, 9.x prior to 9.4.6, and 10.x prior to 10.1.1. Mitigations in public advisories indicate upgrading to versions ...

Adobe Reader U3D Image Language Buffer Overflow (APSB11-16; CVE-2011-2094; CVE-2011-2095)

A buffer overflow vulnerability that could lead to code execution has been reported in Adobe Reader. The vulnerability is due to an incorrect handling of parameters when loading the 3D objects inside the Adobe Reader. Successful exploitation will create a denial of service condition, causing the...

Adobe Reader U3D TextureContinuationBlock Code Execution (APSB11-16; CVE-2011-2096)

Portable Document Format PDF is an open file format created by Adobe Systems. A code execution vulnerability has been reported in Adobe Reader that could cause the application to crash and potentially allow an attacker to take control of the affected system. This is an integer underflow...

acroread: critical APSB11-03

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a...

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerabilit...

Adobe Acrobat Reader U3D Texture BMP File Buffer Overflow (APSB11-03; CVE-2011-0599)

Adobe Acrobat and Reader products include a plugin to parse the U3D image files inside PDF documents. The Universal 3D format can link to external image files, for example in BMP format, that provide texture data for the 3D objects. BMP is an image file format used to store bitmap digital images....

ZDI-11-067: Adobe Acrobat Reader U3D Texture rgba RLE Decompression Remote Code Execution Vulnerability

ZDI-11-067: Adobe Acrobat Reader U3D Texture rgba RLE Decompression Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-067 February 8, 2011 -- CVE ID: CVE-2011-0591 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe...

ZDI-11-070: Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability

ZDI-11-070: Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-070 February 8, 2011 -- CVE ID: CVE-2011-0595 -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:C/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe...