bugtraq - Adobe Reader invalid root page node Count value DOS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050218013322.12994.qmail@www.securityfocus.com>
Date: 18 Feb 2005 01:33:22 -0000
From: Hongzhen Zhou <felix__zhou@...mail.com>
To: bugtraq@...urityfocus.com
Subject: Adobe Reader invalid root page node Count value DOS

         Adobe Reader invalid root page node Count value DOS

Author
======
    Fortinet,inc (hongzhen zhou <felix__zhou _at_ hotmail _dot_ com>)

Vulnerable
==========
    Acrobat Reader 7.0.0 for Windows (English Version) -- latest version
    Acrobat Reader 6.0.3 for Windows (Simplied Chinese Version)
    ( Other versions are not tested. )

Description
===========
When the "Count" value of the root page node set to a negative digit, the Adobe Reader may not crash immediately,
but if the user used mouse to click the client rectangle of the Reader immediately,
then it died. I change the "PageMode" value of "Catalog" 
to "FullScreen"(that means display the document in full-screen mode),
then the Reader crashes immediately and automatically:). 

POC
===
    http://www.xfocus.net/tools/200502/POC.pdf