74408 – <=app-text/acroread-5.09 - mailListIsPdf() Buffer Overflow Vulnerability

Bug 74408 - <=app-text/acroread-5.09 - mailListIsPdf() Buffer Overflow Vulnerability

Summary: <=app-text/acroread-5.09 - mailListIsPdf() Buffer Overflow Vulnerability

Status:	RESOLVED DUPLICATE of bug 74406

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All All

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2004-12-14 10:25 UTC by Carsten Lohrke (RETIRED)
Modified:	2005-07-17 13:06 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Carsten Lohrke (RETIRED) gentoo-dev

2004-12-14 10:25:27 UTC

Remote exploitation of a buffer overflow in version 5.09 of Adobe
Acrobat Reader for Unix could allow for execution of arbitrary code.

The vulnerability specifically exists in a the function mailListIsPdf().
This function checks if the input file is an email message containing
a PDF. It unsafely copies user supplied data using strcat into a fixed
sized buffer.

http://www.idefense.com/application/poi/display?id=161&type=vulnerabilities

Comment 1 Carsten Lohrke (RETIRED) gentoo-dev

2004-12-14 10:26:41 UTC

too slow dude

*** This bug has been marked as a duplicate of 74406 ***