Update Protection against Adobe Reader and Acrobat Crafted URI Action in PDF File Cross-Site Scripting Vulnerability (APSB11-03)
| Check Point Reference: | CPAI-2011-033 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Adobe Security Bulletin APSB11-03 | |
| Industry Reference(s): | CVE-2011-0587 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Adobe Reader X (10.0) and earlier versions for Windows and Macintosh Adobe Reader 9.4.1 and earlier versions for Windows, Macintosh and UNIX Adobe Acrobat X (10.0) and earlier versions for Windows and Macintosh | ||
| Vulnerability Description A cross-site scripting (XSS) vulnerability has been discovered in Adobe Reader and Acrobat. Adobe Reader and Acrobat is a family of computer programs developed by Adobe Systems, designed to view, create, manipulate and manage files in Adobe's core technology, the Portable Document Format (PDF), a format that has become the de facto standard in the electronic document exchange. A remote attacker could exploit these issues to execute a cross-site scripting attack or cause a denial of service condition via a malformed PDF file. |
||
|
Update/Patch Available Adobe has released an advisory to address this vulnerability. |
|
|
Vulnerability Details PDF files can contain OpenActions, which are actions that are executed when a document is opened. URI actions are a type of OpenAction that cause a specified URI to be resolved. The vulnerability occurs when Adobe Reader opens a PDF file with a specially crafted URI action. Successful exploitation of this issue will allow the attacker to inject arbitrary web script or HTML to the vulnerable system. |
Protection Overview
This protection will detect and block the transferring of malformed PDF files over HTTP.
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, Protection taband select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.