Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability

  Severity: CRITICAL
  CVE Identifier: CVE-2008-4813
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003301
  Trend Micro Deep Security DPI Rule Name: 1003301 - Adobe Acrobat PDF Font Processing Memory Corruption

  AFFECTED SOFTWARE AND VERSION

  • Adobe Acrobat 8.1.1
  • adobe acrobat 8.1.2
  • adobe reader 8.1.2