Re: [Full-disclosure] Memory corruption when loading/unloading Adobe objects through EMBED tag in Firefox

[Rohit Patnaik <quanticle@xxxxxxxxx>]

Has Foxit released an update for this?

--Rohit Patnaik

On Tue, Oct 13, 2009 at 6:40 PM, mrx <mrx@xxxxxxxxxxxxxxxxxxx> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> It would appear that Foxit reader version 3.1.1.0928 is also
> vulnerable to this memory corruption flaw.
> Foxit reader was also vulnerable to the JPEG2000/JBIG2 decoder bug.
>
> Makes me wonder how much code is common to both Adobes and Foxits PDF
> readers
>
> MrX
>
>
> Berend-Jan Wever wrote:
> > Adobe bulletin:
> > http://www.adobe.com/support/security/bulletins/apsb09-15.html
> >
> > Short description and repro case:
> >
> http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/
> > Cheers,
> >
> > SkyLined
> > <
> http://skypher.com/index.php/2009/10/13/memory-corruption-when-loadingunloading-adobe-objects-through-embed-tag-in-firefox/
> >
> > Berend-Jan Wever <berendjanwever@xxxxxxxxx>
> > http://skypher.com/SkyLined
> >
> >
> > ----------------------------------------------------------------------
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEVAwUBStUQArIvn8UFHWSmAQJ1TwgAqfyfut/IWpj22P88P1oM91vN101X6VbN
> qF+I8cNuqfBhEExjayeiQwd6MZmBWUF7CrtyTYw62ZPNtOhEyyfG522oBRQmDoky
> fsnHThIQ/Nyp6SCobV/vv8TmQZZ5XRnw+JeuxP1Bgqwz8hcMpLt1I196wSqu4ELE
> WMSrOYy84VNDoAcbCQsaXg0Kuno10yyAmpixQOCwPk/YwNuQHvow1wFDE9zbhIjI
> +nldlXLUR1yPOGFZSut9vB6gBN5gOranrgV5NR4cXTqjBzj/o88ElMw+GTGhVD/p
> EfeUCQYJ7UncvaSIMRxyqcEeKYYKjec9bpuqvNUTczvm/AKhg2torw==
> =pG9N
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/