Vulnerability Note VU#167228
Adobe Acrobat fails to properly convert files to PDF
OverviewA vulnerability exists in Adobe Acrobat that may allow an attacker to execute arbitrary code.
I. DescriptionAdobe Acrobat contains a buffer overflow in the code that converts files to PDF. If an attacker can convince a user to create a PDF using specially-crafted input, that attacker may be able to trigger the overflow.
Adobe reports this vulnerability only affects Adobe Acrobat versions 6.0.4 and earlier. For more information refer to Adobe Security bulletin APSB06-09.
II. ImpactAn attacker may be able to execute arbitrary code or cause the instance of Adobe Acrobat to terminate.
III. SolutionUpgrade
Upgrade to Acrobat 6.0.5.
Systems Affected
| Vendor | Status | Date Updated |
|---|
| Adobe | Vulnerable | 21-Jul-2006 |
References
http://www.adobe.com/support/security/bulletins/apsb06-09.html
http://secunia.com/advisories/21014/
Credit
This vulnerability was reported by Adobe.
This document was written by Ryan Giobbi.
Other Information
| Date Public | 07/12/2006 |
| Date First Published | 07/24/2006 09:29:31 AM |
| Date Last Updated | 07/24/2006 |
| CERT Advisory | |
| CVE Name | CVE-2006-3453 |
| Metric | 0.08 |
| Document Revision | 52 |
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
