Bug 469875 – CVE-2008-4812 Adobe Reader: embedded font handling out-of-bounds array indexing

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 469875 - (CVE-2008-4812) CVE-2008-4812 Adobe Reader: embedded font handling out-of-bounds array indexing

Summary:	CVE-2008-4812 Adobe Reader: embedded font handling out-of-bounds array indexing

Status:	CLOSED ERRATA

Aliases:	CVE-2008-4812

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	urgent Severity urgent
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:	http://nvd.nist.gov/nvd.cfm?cvename=C...
Whiteboard:	impact=critical,source=adobe,reported...
Keywords:	Security

Depends On:	469916 469917 469918
Blocks:
	Show dependency tree / graph

Reported:	2008-11-04 11:05 EST by Josh Bressers
Modified:	2008-11-13 10:36 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2008-11-13 10:36:16 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2008:0974	normal	SHIPPED_LIVE	Critical: acroread security update	2008-11-12 12:26:33 EST

Groups: None (edit)

Description Josh Bressers 2008-11-04 11:05:02 EST

Adobe Reader 8 contains multiple input validation errors.  According to
Adobe these flaws could result in arbitrary code execution with the
permissions of the user running Adobe Reader.

Comment 2 Tomas Hoger 2008-11-05 03:51:10 EST

Public now via upstream security bulletin:
  http://www.adobe.com/support/security/bulletins/apsb08-19.html

Additional details from iDefense advisory:
  http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755
  http://marc.info/?l=full-disclosure&m=122583271427154&w=4

  The vulnerability specifically exists in code responsible for parsing Type 1
  fonts. After allocating an area of memory, no bounds checking is performed.
  Subsequent access of this memory may result in modification of arbitrary
  memory, which in turn may result in arbitrary code execution.

Comment 4 Red Hat Product Security 2008-11-13 10:36:16 EST

This issue was addressed in:

Red Hat Enterprise Linux Extras:
  http://rhn.redhat.com/errata/RHSA-2008-0974.html

Note You need to log in before you can comment on or make changes to this bug.