Now PATCHED - Adobe Reader/Acrobat Font parsing of type integer overflow vulnerability

The following was copied/pasted from http://secunia.com/advisories/40766/

Description
Charlie Miller has discovered a vulnerability [criticism] in Adobe Reader / Acrobat, which can be exploited by malicious people to compromise a user's system.

Vulnerability is due to an integer overflow error in CoolType.dll during the analysis of the value of the 'maxCompositePoints' field in table 'maxp' (profile Maximum) of a TrueType font. This can be exploited to memory corrupted via a PDF file containing a specially designed TrueType font.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in Adobe Reader versions 8.2.3 and 9.3.3 and Adobe Acrobat version 9.3.3. Other versions may also be affected.

Solution
Do not open untrusted PDF files.

Provided and/or discovered by
Charlie Miller, Independent Security Evaluators.

Original notice
Crash Analysis with BitBlaze (pages 51-58):
http://securityevaluators.com/files/papers/CrashAnalysis.PDF


Tags: Dell Software

Similar Questions

  • Hello, I have a problem, I can´t download adobe reader Acrobat DC2015 12.0 WIN AOO standard version

    Hello, I have a problem, I can´t download adobe reader Acrobat DC2015 12.0 WIN AOO standard version

    Hey soportei74211108,

    Please download & install Acrobat Standard DC using this link download Acrobat products | Standard, Pro | DC, XI, X.

    Let me know how it goes.

    Kind regards

    Nicos

  • I get an error message when you try to download adobe reader acrobat dc [Android]

    Can anyone provide assistance? I get an error message when you try to download adobe reader acrobat dc

    Hello

    The error is not related to the Adobe Acrobat application. There is a problem with the store to play on your phone. You can try the precautions listed in the error store play 927 - 3 ways to get rid of it in Android | Difficulty of errors.

    If all goes well, that should solve your problem.

    Thank you

    Adobe Acrobat team

  • is adobe reader, acrobat requires a reboot of the system for installation and improvement

    is adobe reader, acrobat requires a reboot of the system installation and improvement?

    Hi Harish,

    If you install it for the first time, it does not require a reboot. But if you repair the installation, it will require a reboot.

    Some quarterly updates require reboot. It also depends on when was the last time you rebooted the machine for the changes to apply.

  • What versions of Adobe Reader/Acrobat are affected by the Win32/Pdfjsc.AMJ feat?

    I have a user who tried to open a PDF file containing the Win32/Pdfjsc.AMJ feat, and I wonder which versions of Adobe Reader and Acrobat are affected by the latter. I would also like to know what this exploit is able to do so if the versions she used are affected. Versions of Acrobat/Reader with its workstation are Adobe Acrobat Standard 9.5.5 and Adobe Reader 11.0.0.7.

    Thank you

    Ben

    Look here: Adobe - Security Bulletins: APSB13-15 - updates for Adobe Reader and Acrobat security

  • Adobe Reader/Acrobat and IE9 64-bit

    We cannot use 64-bit of IE9 with Reader and Acrobat. I understand that the 64-bit version of IE9 is not compatible... is that correct?

    Adobe Reader and the browser add-on are 32-bit; It will not work on a 64-bit browser.

  • E-mail button does not work with Adobe Reader, Acrobat only

    Hello

    I am new to Adobe products and do not have a lot of experience. Here's my problem.

    I used LiveCycle Designer ES2 to create a PDF form to fill, with a send email button. (use mailto: to open Outlook users and attached the PDF automatically)

    The shape is visible by all, but the e-mail button works only if opened with Acrobat.

    Is it possible to have this work with the drive? We obviously don't have Acrobat licenses for each user.

    Any help or assistance would be greatly appreciated.

    Thank you

    The document must be enabled for the reader, which allows to drive save the completed form. To do this in Acrobat 10, select "file > save as > Reader Extended PDF > activate additional features. In Acrobat i9, it's "Advanced > extend features in Adobe Reader. This should be the last thing you do before you distribute the file.

  • Windows roll 10 back to windows 7 and now my adobe reader will not work.

    my computer won't let me open PDF files.  I tried to reload and delete Adobe reader and my computer gives me an error "the component you are trying to use is on a resource not available network.

    I can't uninstall either.  I get the same error.

    Any suggestions to fix this?

    The cleaning tool did not work.  still got the same message.  I found and followed this link and it seemed to fix it.

    my download install when it reads the file "missing acroread.msi '.  How to do this?

    Thanks for your quick response.

  • How can I change the mouse '-scroll-speed of the wheels in Adobe Reader / Acrobat Pro?

    While I am a student, I read a lot of books to the computer with Adobe Acrobat, and sometimes I just skim the pages to find something. What keeps me boring, that although my speed is set to fast in Windows settings, whenever I open a pdf file and zoom in a bit to adapt to changes in Adobe screen, scrolling speed wheel of my mouse to very slow.
    It seems to me, if I would try to scroll in this situation through a say that only 20 pages ebook it could last for years before reaching the end of the pages...

    Any suggestions why or how to change this behavior?

    Here's what I did:

    1) update your rate of scrolling the mouse.

    (2) in order to actually use my scroll rate, I go to select 'View-> Page Display-> single Page continuous' rather than simply 'single Page '. Œuvres fast scrolling.

  • Adobe Reader / Adobe Acrobat Pro XI

    I now have Adobe reader and Adobe Acrobat XI pro installed. If I remove the Adobe Reader program I lose all of my PDF files?

    Hi John,.

    N ° you won't lose any of your pdf files.

    Kind regards

    Rahul Tyagi

  • Why Adobe Reader 11.0.12 patch asks for the original installation file?

    We use SCCM 2012 R2 & SCUP to deploy patches Adobe Reader and the month last day with more than 95% of the Adobe Reader 11.0.0 workstations to Adobe Reader 11.0.11 with no problems.  It was the first time we had patched an Adobe product.

    Last week we deployed Adobe Reader 11.0.12 with more than a quarter of the estate do not update the patch is looking for the original installer (AcroRead11.5.msi) in c:\windows\ccmcache\x.  The location of ccmcache is allowed out regularly as it is a location of temporary cache for the application of SCCM and hotfix deployments.

    Why the patch is looking for this temporary location when 11.0.11 didn't needlast month? Have I missed something with the way that Adobe offers its patches?

    Thank you

    For what it's worth, this might help someone else...

    Subsequently found this on the site of Adobe http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/aip.html

    We do not all Applications within our workstation image, they are all applied after compilation.  Why this article applies to our situation.

  • How to download adobe reader

    I had a huge problem, update my adobe flash player, I think I could have solved to look here. The problem now is Adobe Reader, with everything I did install, reinstall, etc. I suddenly can print pdf files. I just uninstall the drive and now it install it at all I get the black screen of death in step 2.
    Can someone help me to reinstall in the hope that I can print again?

    Thank you

    Article use the Adobe Reader to view or download PDF files plugin wrong with details on how to install Adobe Reader. It simply connects to the Adobe download page. If I remember correctly, you can download the installer for Adobe Reader XI from this page, even if on Windows Vista, by choosing Windows 7 as OS.

    In any case, Firefox now has its own built-in PDF Viewer, so you have other ways to open, view and print PDF files in Firefox, in addition to Adobe Reader or other PDF browser plugins. See view in Firefox PDF files for more details.

    If your problem is only with the installation of Adobe Reader, maybe an article from Adobe will help you?

    For installation problems of Adobe Reader which are not resolved by reading the articles above, your best bet would be to ask for help on the forums Adobe Reader.

  • I can't install Adobe Reader 10.1.04 on my Windows Vista computer

    I was unable to install Adobe Reader on my laptop Toshiba 32-bit of Windows Vista (SP1) and it would be really grateful for the help.

    Here is the error message I get:

    Error 1402. Could not open key: UNKNOWN\.api\AcroExch.Plugin\ShellNew. Check that you have sufficient access to that key or contact your support team.

    Here is a brief history of what I tried already:

    # 1 AdbeRdr1014_en_US.exe downloaded as stand-alone file several times from different servers and sites.

    # 2 uninstalled Adobe Reader 9.0

    # 3 Ran AdbeArCleaner.exe several times to remove ANY version of Acrobat or Reader perious.

    # 4 open each of my 4 browsers, the latest version of IE, Opera, Firefox and Chrome, looked for Plugins or Add Ons and deleted ALL associated Adobe apps except Flash.

    # 5 Open Control Panel, programs, versions searched and deleted ALL of Acro fast player or quick recorder.

    # 6 Ran Norton Utilities Registry Clean several times.

    # 7 when you try to install the 10.1.04 drive I had ALREADY received this error message:

    Error 1402.Could not open key: HKEY_LOCAL_MACHINE\Software\Classes\AcroExch.Document\Shell\Open\Command. Check that you have sufficient access to that key or contact your support team.

    However, after using the cleaning of Adobe tool, I had is no longer this error.

    # 8 I also disabled my A - V program over all attempts to install Kaspersky PURE 2.0.

    The reason why I wanted to update to Adobe Reader 10 was that Kaspersky did a vulnerability check indicating:

    "Adobe Reader/Acrobat multiple vulnerabilities.

    See: http://www.SecureList.com/en/advisories/47133/?function=advisories & VN = 47133

    Solution has been updated to version 10.1.2 (or higher).

    Now, I can't open it. PDF files. I can't find the so-called Plugin that causes the installation to stop. The installation of the 10.1.04 reader happens to approximately 96% complete, then fails and restores.

    # 9 is there an easy solution, such as a tool that autyomatically will remove any corresponding registry key, or apply the correct administrative attributes for the registry keys? If this is not the case, can you please talk me through this step by step. I never been so confused or frustrated by an upgrade of the software, what I thought would be a simple task.

    THANKS in advance for your help is very appreciated.

    See you soon,.

    Ecto

    EctoSD wrote:

    These complex issues frequently occur?

    No, not with Adobe Reader.   In fact, the Acrobat cleaning tool should have taken care of that.  But it's a question that I see from time to time in the forum of Flash Player.  Unfortunately this installer doesn't tell us what key is the origin of the problem.

    SubInACL:

    • Download and install from this link http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=23510 (the download page doesn't mention Vista, I installed it on Windows 7, so Vista shouldn't be a problem)
    • Download the attached file reset_ar10.bat and unzip it in the same folder as SubInACL is installed ('C:\Program Files\Windows Resource Kits\Tools' or ' C:\Program Files (x 86) \...) If you are on a 64-bit system)
    • Run the file to extract from reset_ar10.bat (I just noticed that there are not run as administrator from the context menu)

    I will attach the reset_ar10.bat file, I get errors during the test.  I'll do another post when it's ready.

  • How to open a default PDF with Adobe Reader?

    Hello world!!

    I used to have Adobe Acrobat, but I don't have it anymore.

    When I had Acrobat PDF files in my sistem and PDF files in the web site have been opened without problems by Acrobat but now I just Adobe Reader (Acrobat, not) and PDF files in my sistem and on the web are not open and cannot read...

    Even PDF files in my sistem display a PDF icon as when I had installed Acrobat.

    What could I do to be able to open files by default PDF with my Adobe Reader software?

    Thanks a lot for your help.

    Right click on a PDF file and select open with and then select the always open with button. You can get Adobe Reader and go from there. It is a feature of the OS, not a feature of player. For any other questions about Reader, see the reader forum.

  • Cannot install Adobe Reader, get message cannot find the file 'acro.read.msi '.

    Original title: problem installing Adobe

    Try to reinstall Adobe Reader.  I get an error saying that the system cannot find file 'acro.read.msi '.  Can someone help me on this?

    Hello

    You did changes to the computer before the show?

    Method 1: Run the fixit

    I suggest you to run the fixit:

    Solve problems with programs that cannot be installed or uninstalled

    http://support.Microsoft.com/mats/Program_Install_and_Uninstall

    Method 2: Run the tool to remove possible remnants of Adobe reader

    Adobe Reader and Acrobat cleaning tool

    http://labs.Adobe.com/downloads/acrobatcleaner.html

     

    You can also consult the site:

    Help installing troubleshoot Adobe Reader Acrobat | Windows

    http://helpx.Adobe.com/Acrobat/KB/troubleshoot-reader-installation-Windows.html#main_Known_issues

Maybe you are looking for

  • Question chart satellite M40x-189

    Hiya. Could someone tell me if it is possible to get better graphics performance with a card in the slot of PCB on my laptop? If not, please inform me any upgrades or advice I could do to get my graphics to the height (eg. ready for Vista?). Thank yo

  • Satellite P305-S8820 won't start no-POST 'BLACK SCREEN' will not start up CD

    When the HARD drive is connected Vista does not start, regardless of the boot order. Instead, it shows just a black screen with no cursor. Supplied recovery disks will not start. I removed the HARD drive and ran a scan of the disc to see if the drive

  • problem scaning hp4500 officejet g510g

    I have no hp Solution Center

  • Delivery times.

    Just bought 15 Alienware (upgrade of our M17x). However, why it state 3-5 work days business when in fact it's more like 3 weeks.

  • Firewall error 0 x 80070424...

    I have a Trojan back/Alureon.A horse which I've tried to shake, after a company called "iyogi" messed up my pc and lost all my photos, documents and videos... after running a scan (to left and went to church)... came home and restarted the pc... now