Bug 74408

Summary:	<=app-text/acroread-5.09 - mailListIsPdf() Buffer Overflow Vulnerability
Product:	Gentoo Security	Reporter:	Carsten Lohrke (RETIRED) <carlo>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	printing
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
Package list:		Runtime testing required:	---

Description Carsten Lohrke (RETIRED) gentoo-dev

2004-12-14 10:25:27 UTC

Remote exploitation of a buffer overflow in version 5.09 of Adobe
Acrobat Reader for Unix could allow for execution of arbitrary code.

The vulnerability specifically exists in a the function mailListIsPdf().
This function checks if the input file is an email message containing
a PDF. It unsafely copies user supplied data using strcat into a fixed
sized buffer.

http://www.idefense.com/application/poi/display?id=161&type=vulnerabilities

Comment 1 Carsten Lohrke (RETIRED) gentoo-dev

2004-12-14 10:26:41 UTC

too slow dude

*** This bug has been marked as a duplicate of 74406 ***