Adobe Reader and Acrobat are prone to an overflow condition. The programs fail to properly sanitize MINDEX opcodes supplied within true type fonts, resulting in a buffer overflow. With a specially crafted PDF file, a context-dependent attacker can potentially execute arbitrary code.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade to version 10.1.3 or 9.5.1 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
