SB2009080701 - Gentoo update for Adobe products

Description

This security bulletin contains information about 9 secuirty vulnerabilities.

1) Memory corruption (CVE-ID: CVE-2009-1862)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to boundary error when parsing malformed files. A remote attacker can create a specially .pdf file or .swf file, related to authplay.dll, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Note: the vulnerability was being actively exploited.

2) Buffer overflow (CVE-ID: CVE-2009-1863)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

3) Heap-based buffer overflow (CVE-ID: CVE-2009-1864)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to heap-based buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

4) Null pointer dereference (CVE-ID: CVE-2009-1865)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code on the target system.

The weakness exists due to NULL pointer dereference when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

5) Stack-based buffer overflow (CVE-ID: CVE-2009-1866)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to stack-based buffer overflow when handling malformed files. By sending a specially crafted .pdf file, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

6) Clickjacking attack (CVE-ID: CVE-2009-1867)

The vulnerability allows a remote attacker to hijack the clicking action of the victim.

The vulnerability exists in IBM Security Identity Manager Virtual Appliance. A remote attacker can hijack the target user's mouse clicks and take actions on the site acting as the target user by tricking the victim into visiting a malicious web site.

Successful exploitation of this vulnerability may result in disclosure of user information.

7) Heap-based buffer overflow (CVE-ID: CVE-2009-1868)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code with elevated privileges on the target system.

The weakness exists due to heap-based buffer overflow when parsing URL. A remote attacker can create a specially crafted Web page, trick the victim into visiting it, trigger memory corruption and cause the application to crash or execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

8) Integer Overflow or Wraparound (CVE-ID: CVE-2009-1869)

The vulnerability allows a remote attacker to cause DoS conditions or execute arbitrary code on the target system.

The weakness exists due to integer overflow when handling malformed files. By sending a specially crafted AVM2 file with a large intrf_count value, a remote attacker can trigger memory corruption and cause the application to crash or execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in denial of service or arbitrary code execution on the vulnerable system.

9) Information disclosure (CVE-ID: CVE-2009-1870)

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to improper access control. A remote attacker can create a specially crafted SWF file, trick the victim into opening it, bypass the Security Sandbox model, scan ports, and obtain sensitive information.

Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.

Remediation

Install update from vendor's website.

References

• https://security.gentoo.org/glsa/200908-04