Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag.

This update fixes a buffer overflow in Acrobat Reader versions 5 and 7, where an attacker could execute code by providing a handmade PDF to the viewer.

The Acrobat Reader 5 versions of 9.1 and 9.2 were upgraded to Acrobat Reader 7. This version upgrade can cause new dependencies to appear, please check with the YaST Software Package Installation frontend if there are new dependencies and install the required packages.

Since this attack could be done via E-Mail messages or webpages, this should be considered to be remote exploitable.

This issue is tracked by the Mitre CVE ID CVE-2005-1625.

An Adobe Security Advisory reports :

A vulnerability within Adobe Reader has been identified. Under certain circumstances, remote exploitation of a buffer overflow in Adobe Reader could allow an attacker to execute arbitrary code.

If exploited, it could allow the execution of arbitrary code under the privileges of the local user. Remote exploitation is possible if the malicious PDF document is sent as an email attachment or if the PDF document is accessed via a web link.

The remote host is affected by the vulnerability described in GLSA-200507-09 (Adobe Acrobat Reader: Buffer overflow vulnerability)

    A buffer overflow has been discovered in the     UnixAppOpenFilePerform() function, which is called when Adobe Acrobat     Reader tries to open a file with the '\\Filespec' tag.
  Impact :

    By enticing a user to open a specially crafted PDF document, a     remote attacker could exploit this vulnerability to execute arbitrary     code.
  Workaround :

    There is no known workaround at this time.

Updated acroread packages that fix a security issue are now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format (PDF).

A buffer overflow bug has been found in Adobe Acrobat Reader. It is possible to execute arbitrary code on a victim's machine if the victim is tricked into opening a malicious PDF file. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-1625 to this issue.

Please note that there is no browser plugin included with the x86_64 Adobe Acrobat Reader package; Therefore the security impact of this issue on x86_64 is reduced from 'critical' to 'important'.

Additionally Secunia Research discovered a bug in the way Adobe Acrobat Reader creates temporary files. When a user opens a document, temporary files are created which may be world readable, allowing a local user to view sensitive information. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-1841 to this issue.

All users of Acrobat Reader are advised to upgrade to these updated packages, which contain Acrobat Reader version 7.0.0 and are not vulnerable to this issue.

ID	Name	Product	Family	Severity
58225	SuSE9 Security Update : Acrobat Reader (YOU Patch Number 10316)	Nessus	SuSE Local Security Checks	medium
18979	FreeBSD : acroread -- buffer overflow vulnerability (70c59485-ee5a-11d9-8310-0001020eed82)	Nessus	FreeBSD Local Security Checks	medium
18668	GLSA-200507-09 : Adobe Acrobat Reader: Buffer overflow vulnerability	Nessus	Gentoo Local Security Checks	medium
18657	RHEL 3 / 4 : Adobe Acrobat Reader (RHSA-2005:575)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2005-1625

high

Tenable Plugins

medium

medium

medium

medium