Adobe Acrobat Reader - JBIG2 Universal

Adobe Acrobat Reader JBIG2 Universal Exploit Bind Shell port 5500 write up: http://bl4cksecurity.blogspot.com/2009/03/adobe-acrobatreader-universal-exploit.html down: http://blacksecurity.org/download/66/AdobeJBIG2UniversalReaderAcrobatExploit back:...

VulnCheck KEV: CVE-2007-5659

Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods...

Adobe Acrobat Reader JBIG2 Buffer Overflow

!/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = "\x40\x00"; my $factor = "ABCD"; my $data = "A" x 8314; print pdf; sub pdf "%PDF-1.5\n" . "%\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n" . "3 0 \n" . "xref\n" . "3 16\n"...

Adobe Acrobat和Reader 8.1.2多个安全漏洞

BUGTRAQ ID: 32100 CVE ID：CVE-2008-4812 CVE-2008-4813 CVE-2008-4814 CVE-2008-4815 Adobe Acrobat和Reader是PDF文件格式处理程序。 Adobe Acrobat和Reader存在多个安全问题，远程攻击者可以利用漏洞执行任意代码或提升特权等攻击。 -当处理包含在PDF文档中的恶意JavaScript时存在缺陷，当建立Collab对象并在之上执行特定序列操作时，存在内存破坏可导致任意代码执行。...

CVE-2008-4817: Improper Input Validation

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption...

Gentoo Security Advisory GLSA 200507-09 (acroread)

The remote host is missing updates announced in advisory GLSA 200507-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-26 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-16 (acroread)

The remote host is missing updates announced in advisory GLSA 200701-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200507-09 (acroread)

The remote host is missing updates announced in advisory GLSA 200507-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200803-01 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200412-12 (acroread)

The remote host is missing updates announced in advisory GLSA 200412-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200701-16 (acroread)

The remote host is missing updates announced in advisory GLSA 200701-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200412-12 (acroread)

The remote host is missing updates announced in advisory GLSA 200412-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: acroread, acroread4, acroread5

The remote host is missing an update to the system as announced in the referenced advisory. VID 78348ea2-ec91-11d8-b913-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: acroread, acroread4, acroread5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: acroread, acroread4, acroread5

The remote host is missing an update to the system as announced in the referenced advisory. VID 28e93883-539f-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Adobe Acrobat Reader JavaScript方式远程代码执行漏洞

BUGTRAQ ID: 29908 CVECAN ID: CVE-2008-2641 Acrobat Reader是一款流行的PDF文件阅读器。 Acrobat Reader的JavaScript方式存在输入验证错误，如果用户受骗打开了内嵌有恶意JavaScript内容的PDF文件的话就会导致执行任意指令。 Adobe Acrobat Professional = 7.0.9 Adobe Acrobat Professional 8.0 - 8.1.2 Adobe Reader = 7.0.9 Adobe Reader 8.0 - 8.1.2 Adobe -----...

Adobe Acrobat Reader未明远程拒绝服务漏洞

BUGTRAQ ID: 29420 CNCAN ID：CNCAN-2008053001 Adobe Acrobat Reader是一款PDF文件解析程序。 Adobe Acrobat Reader存在一个未明安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供，可能导致任意代码执行。 Adobe Acrobat Reader 8.1.2 Adobe Acrobat Reader 8.1.1 Adobe Acrobat Reader 7.0.9 Adobe Acrobat Reader 7.0.8 Adobe Acrobat Reader 7.0.8...

CVE-2008-2549

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf...

Code injection

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf...