Adobe Acrobat and Reader are prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in an integer overflow. This may allow an attacker to cause a denial of service or execute arbitrary code. No further details have been provided.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Solution:
Upgrade
Disclosure:
Vendor Verified,
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade Reader to version 9.2 or higher and Acrobat users to upgrade to version 7.1.4, 8.1.7, 9.2 or higher as it has been reported to fix this vulnerability. Adobe has provided updates to Reader 7.1.4 and 8.1.7.
