Adobe 0-day

[ByTeWrangler]

Adobe is at it again ..


http://secunia.com/advisories/34924/

There are two 0-day vulnerabilities on Adobe Acrobat announced today, all current versions are vulnerable. One exploits the annotation function and the other exploits the custom Dictionary function. Both of these buffer overflow vulnerabilities exist in the Javascript system of the Adobe Acrobat and can be mitigated by disabling Javascript on Adobe Acrobat.

Since the exploits for these vulnerabilities on Linux platform are posted to the Internet, we can just guess that someone will somehow make it work on Windows and use it to spread botnet agents shortly.

Exploits are OUT !..

[Linen0ise]

Adobe is at it again ..


http://secunia.com/advisories/34924/



Exploits are OUT !..

I wonder if this will effect "other" pdf clones using plugins for your favorite linux browser. This is similar to the boobytrapped ".zip" trojan that open-source developers used in their programs.

[nihil]

I have just run Secunia PSI against the Foxit reader and it doesn't report any vulnerabilities. They have done so in the past so it is an app. that they monitor.

[ByTeWrangler]

There is a workaround (I should have posted this with the original post, but pardon me I had CISSP coming up in few days) ..

In the meantime, you can perform mitigation steps by disabling JavaScript in Reader and Acrobat:
Launch Acrobat or Adobe Reader.
Select Edit>Preferences
Select the JavaScript Category
Uncheck the ‘Enable Acrobat JavaScript’ option
Click OK


Links :

http://www.adobe.com/support/securit...apsa09-02.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1492
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1493