Adobe Acrobat and Reader Font Parsing Integer Overflow Vulnerability
RISK: Medium Risk
A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by attackers to potentially compromise a vulnerable system. This issue is caused by an integer overflow error in the "CoolType.dll" module when processing a PDF document containing a TrueType Font (TTF) with a malformed "maxComponentContours" field in the "maxp" table, which could be exploited by attackers to crash an affected application or potentially execute arbitrary code by tricking a user into opening a specially crafted PDF document.
Impact
- Remote Code Execution
System / Technologies affected
- Adobe Reader version 9.3.3 and prior
- Adobe Reader version 8.2.3 and prior
- Adobe Acrobat version 9.3.3 and prior
- Adobe Acrobat version 8.2.3 and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Upgrade to Adobe Acrobat and Reader version 9.3.4 or 8.2.4 :
http://www.adobe.com/support/security/bulletins/apsb10-17.html
Vulnerability Identifier
Source
Related Link
Share with