[ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities

[Robert Buchholz <rbu () gentoo org>]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 200908-04
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                            http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  Severity: Normal
     Title: Adobe products: Multiple vulnerabilities
      Date: August 07, 2009
      Bugs: #278813, #278819
        ID: 200908-04

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities in Adobe Reader and Adobe Flash Player allow
for attacks including the remote execution of arbitrary code.

Background
==========

Adobe Flash Player is a closed-source playback software for Flash SWF
files. Adobe Reader is a closed-source PDF reader that plays Flash
content as well.

Affected packages
=================

    -------------------------------------------------------------------
     Package                  /   Vulnerable   /            Unaffected
    -------------------------------------------------------------------
  1  www-plugins/adobe-flash     < 10.0.32.18            >= 10.0.32.18
  2  app-text/acroread              < 9.1.3                   >= 9.1.3
    -------------------------------------------------------------------
     2 affected packages on all of their supported architectures.
    -------------------------------------------------------------------

Description
===========

Multiple vulnerabilities have been reported in Adobe Flash Player:

* lakehu of Tencent Security Center reported an unspecified memory
  corruption vulnerability (CVE-2009-1862).

* Mike Wroe reported an unspecified vulnerability, related to
  "privilege escalation" (CVE-2009-1863).

* An anonymous researcher through iDefense reported an unspecified
  heap-based buffer overflow (CVE-2009-1864).

* Chen Chen of Venustech reported an unspecified "null pointer
  vulnerability" (CVE-2009-1865).

* Chen Chen of Venustech reported an unspecified stack-based buffer
  overflow (CVE-2009-1866).

* Joran Benker reported that Adobe Flash Player facilitates
  "clickjacking" attacks (CVE-2009-1867).

* Jun Mao of iDefense reported a heap-based buffer overflow, related
  to URL parsing (CVE-2009-1868).

* Roee Hay of IBM Rational Application Security reported an
  unspecified integer overflow (CVE-2009-1869).

* Gareth Heyes and Microsoft Vulnerability Research reported that the
  sandbox in Adobe Flash Player allows for information disclosure, when
  "SWFs are saved to the hard drive" (CVE-2009-1870).

Impact
======

A remote attacker could entice a user to open a specially crafted PDF
file or web site containing Adobe Flash (SWF) contents, possibly
resulting in the execution of arbitrary code with the privileges of the
user running the application, or a Denial of Service (application
crash). Furthermore, a remote attacker could trick a user into clicking
a button on a dialog by supplying a specially crafted SWF file and
disclose sensitive information by exploiting a sandbox issue.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Adobe Flash Player users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-10.0.32.18"

All Adobe Reader users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=app-text/acroread-9.1.3"

References
==========

  [ 1 ] CVE-2009-1862
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1862
  [ 2 ] CVE-2009-1863
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1863
  [ 3 ] CVE-2009-1864
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1864
  [ 4 ] CVE-2009-1865
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1865
  [ 5 ] CVE-2009-1866
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1866
  [ 6 ] CVE-2009-1867
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1867
  [ 7 ] CVE-2009-1868
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1868
  [ 8 ] CVE-2009-1869
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1869
  [ 9 ] CVE-2009-1870
        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1870

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  http://security.gentoo.org/glsa/glsa-200908-04.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security () gentoo org or alternatively, you may file a bug at
https://bugs.gentoo.org.

License
=======

Copyright 2009 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/