full-disclosure - Re: Memory corruption when loading/unloading Adobe objects through EMBED tag in Firefox

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 14 Oct 2009 02:15:22 +0100
From: mrx <mrx@...pergander.org.uk>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Memory corruption when
 loading/unloading	Adobe objects through EMBED tag in Firefox

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 

Adobe has fixed this issue

http://www.adobe.com/support/security/bulletins/apsb09-15.html

And as this bug relates to Firefox  rendering embedded COM objects
(PDF) inside a browser window. It should be safe to view PDF's inside
both Adobe and Foxit readers whilst offline.

MrX

Rohit Patnaik wrote:
> Are there any available workarounds that would mitigate the threat?  I
> suppose I could just upload all my PDFs to Google Docs in the meantime, but
> I'm looking for something that I could use while offline...
>
> --Rohit Patnaik
>
> On Tue, Oct 13, 2009 at 7:35 PM, mrx <mrx@...pergander.org.uk> wrote:
>
>
> No, I installed latest updates prior to testing.
> They should be aware of this however considering what appear to be
> striking similarities in the code base between Foxit and Adobe
> readers, at least as far as shared bugs go.
> If not they will be aware of this after they read the email I sent them.
>
> MrX
>
> Rohit Patnaik wrote:
> >>> Has Foxit released an update for this?
> >>>
> >>> --Rohit Patnaik
> >>>
> >>> On Tue, Oct 13, 2009 at 6:40 PM, mrx <mrx@...pergander.org.uk>
> wrote:
> >>>
> >>>
> >>> It would appear that Foxit reader version 3.1.1.0928 is also
> >>> vulnerable to this memory corruption flaw.
> >>> Foxit reader was also vulnerable to the JPEG2000/JBIG2 decoder bug.
> >>>
> >>> Makes me wonder how much code is common to both Adobes and
> Foxits PDF
> >>> readers
> >>>
> >>> MrX
> >>>
> >>>
> >>> Berend-Jan Wever wrote:
> >>>>>> Adobe bulletin:
> >>>>>> http://www.adobe.com/support/security/bulletins/apsb09-15.html
> >>>>>>
> >>>>>> Short description and repro case:
> >>>>>>
> http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/
> >>>>>> Cheers,
> >>>>>>
> >>>>>> SkyLined
> >>>>>> <
> http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/
> >>>>>> Berend-Jan Wever <berendjanwever@...il.com>
> >>>>>> http://skypher.com/SkyLined
> >>>>>>
> >>>>>>
> >>>>>>
> >>>
> ----------------------------------------------------------------------
> >>>>>> _______________________________________________
> >>>>>> Full-Disclosure - We believe in it.
> >>>>>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >>>>>> Hosted and sponsored by Secunia - http://secunia.com/
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
>>

> ----------------------------------------------------------------------

> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
 
iQEVAwUBStUmKrIvn8UFHWSmAQLvGgf/ZUENmHdfks44uiGTreeEAMkAtcJ0DmYB
/CyHB6omJWnSWIyxUrClcIU62eK1Oue698BjIG1hiyquqFSbnLqzivhB4OSvneYH
8aQodO4gdCO8vwSaQenxO9hk1HPE8RJN9Ds5QqvPZ7qDdhEvdVeaCDyBgn4kERz/
jrgIJKTCYR67EJPuUu31QFWWpp/qIBBAN3ragqXhq5lQxpOxnWohZ0E1kCB9BdIH
BIqZW8Laa62IkGH4ZVDhwwek883m7QzJCGUVOrWt5e02QaZoX9D2ompW2Od6FwJJ
Ro1wlm1bgVPXNhCPJ+Ohq41F96X8S0a9OHlnUwV88EicFwV0Fu9c6Q==
=H/jn
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/