Full Disclosure mailing list archives

Re: Memory corruption when loading/unloading Adobe objects through EMBED tag in Firefox


From: mrx <mrx () propergander org uk>
Date: Wed, 14 Oct 2009 00:40:50 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 

It would appear that Foxit reader version 3.1.1.0928 is also
vulnerable to this memory corruption flaw.
Foxit reader was also vulnerable to the JPEG2000/JBIG2 decoder bug.

Makes me wonder how much code is common to both Adobes and Foxits PDF
readers

MrX


Berend-Jan Wever wrote:
Adobe bulletin:
http://www.adobe.com/support/security/bulletins/apsb09-15.html

Short description and repro case:
http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/
Cheers,

SkyLined
<http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/>
Berend-Jan Wever <berendjanwever () gmail com>
http://skypher.com/SkyLined


----------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
 
iQEVAwUBStUQArIvn8UFHWSmAQJ1TwgAqfyfut/IWpj22P88P1oM91vN101X6VbN
qF+I8cNuqfBhEExjayeiQwd6MZmBWUF7CrtyTYw62ZPNtOhEyyfG522oBRQmDoky
fsnHThIQ/Nyp6SCobV/vv8TmQZZ5XRnw+JeuxP1Bgqwz8hcMpLt1I196wSqu4ELE
WMSrOYy84VNDoAcbCQsaXg0Kuno10yyAmpixQOCwPk/YwNuQHvow1wFDE9zbhIjI
+nldlXLUR1yPOGFZSut9vB6gBN5gOranrgV5NR4cXTqjBzj/o88ElMw+GTGhVD/p
EfeUCQYJ7UncvaSIMRxyqcEeKYYKjec9bpuqvNUTczvm/AKhg2torw==
=pG9N
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: