|
The Adobe Acrobat and Adobe Reader products contain six memory corruption vulnerabilities in the code responsible for parsing the various sections of JBIG2-encoded data streams within a PDF file. These vulnerabilities can be exploited remotely to execute code.
PDF documents are composed of several streams, which may be optionally encoded using one of several filters. One such filter, the JBIG2 filter, contains multiple memory corruption and memory allocation vulnerabilities:
CVE-2009-0509 - a memory corruption vulnerability due to failure to adequately check integers read from the Text Region of the JBIG segments embedded in the file.
CVE-2009-0510 - a memory corruption vulnerability due to failure to adequately check integers read from the Pattern Dictionary of the JBIG segments embedded in the file.
CVE-2009-0511 - a memory allocation problem due to failure to adequately check integers read from the Pattern Dictionary of the JBIG segments embedded in the file.
CVE-2009-0888 - a memory corruption vulnerability due to failure to adequately check integers read from the Halftone Region of the JBIG segments embedded in the file.
CVE-2009-0889 - a memory corruption vulnerability due to failure to adequately check integers read from the Halftone Region Grid Area of the JBIG segments embedded in the file.
CVE-2009-0512 - a memory allocation problem due to failure to adequately check integers read from the Halftone Region of the JBIG segments embedded in the file. | 