SB2009073001 - Multiple vulnerabilities in Adobe Flash Player

Description

This security bulletin contains information about 8 secuirty vulnerabilities.

1) Information disclosure (CVE-ID: CVE-2009-1870)

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to improper access control. A remote attacker can create a specially crafted SWF file, trick the victim into opening it, bypass the Security Sandbox model, scan ports, and obtain sensitive information.

Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.

2) Integer Overflow or Wraparound (CVE-ID: CVE-2009-1869)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code on the target system.

The weakness exists due to integer overflow when handling malformed files. By sending a specially crafted AVM2 file with a large intrf_count value, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

3) Heap-based buffer overflow (CVE-ID: CVE-2009-1868)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to heap-based buffer overflow when parsing URL. A remote attacker can create a specially crafted Web page, trick the victim into visiting it, trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

4) Clickjacking attack (CVE-ID: CVE-2009-1867)

The vulnerability allows a remote attacker to hijack the clicking action of the victim.

The vulnerability exists in IBM Security Identity Manager Virtual Appliance. A remote attacker can hijack the target user's mouse clicks and take actions on the site acting as the target user by tricking the victim into visiting a malicious web site.

Successful exploitation of this vulnerability may result in disclosure of user information.

5) Stack-based buffer overflow (CVE-ID: CVE-2009-1866)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to stack-based buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

6) Null pointer dereference (CVE-ID: CVE-2009-1865)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code on the target system.

The weakness exists due to NULL pointer dereference when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

7) Heap-based buffer overflow (CVE-ID: CVE-2009-1864)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to heap-based buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

8) Buffer overflow (CVE-ID: CVE-2009-1863)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

Remediation

Install update from vendor's website.

References

• http://www.adobe.com/support/security/bulletins/apsb09-10.html