Skip to main content

Adobe Acrobat and Reader Font Parsing Integer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 5 Aug 2010 5599 Views

RISK: Medium Risk

A vulnerability has been identified in Adobe Acrobat and Reader, which could be exploited by attackers to potentially compromise a vulnerable system. This issue is caused by an integer overflow error in the "CoolType.dll" module when processing a PDF document containing a TrueType Font (TTF) with a malformed "maxComponentContours" field in the "maxp" table, which could be exploited by attackers to crash an affected application or potentially execute arbitrary code by tricking a user into opening a specially crafted PDF document.


Impact

  • Remote Code Execution

System / Technologies affected

  • Adobe Reader version 9.3.3 and prior
  • Adobe Reader version 8.2.3 and prior
  • Adobe Acrobat version 9.3.3 and prior
  • Adobe Acrobat version 8.2.3 and prior

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link