[Full-disclosure] [vuln.sg] Adobe PageMaker Long Font-Name Buffer Overflow Vulnerability



[vuln.sg] Vulnerability Research Advisory

Adobe PageMaker Long Font-Name Buffer Overflow Vulnerability

by Tan Chew Keong
Release Date: 2007-10-09

Summary
-------
A vulnerability has been found in Adobe PageMaker for Windows. When
exploited, the vulnerability allows execution of arbitrary code when the
user opens a specially-crafted PageMaker (PMD) file.

Tested Versions
---------------
Adobe PageMaker 7.0.1 for Windows (30-day TryOut version)

The vulnerability also affects:
Adobe PageMaker 7.0.2 (full version)

Details
-------
http://vuln.sg/pagemaker701-en.html
http://vuln.sg/pagemaker701-jp.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • SecurityFocus Microsoft Newsletter #163
    ... MICROSOFT VULNERABILITY SUMMARY ... Bugzilla Javascript Buglists Remote Information Disclosure V... ... Microsoft Internet Explorer DHTML Drag and Drop Local File S... ... Microsoft Windows Workstation Service Remote Buffer Overflow... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #176
    ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows XP HCP URI Handler Arbitrary Command Execu... ... PHPNuke Category Parameter SQL Injection Vulnerability ... Microsoft Baseline Security Analyzer Vulnerability Identific... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #158
    ... Gamespy 3d IRC Client Remote Buffer Overflow Vulnerability ... Microsoft Windows PostThreadMessage() Arbitrary Process Kill... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #123
    ... Spooked about Windows security? ... Rediff Bol URL Handling Denial Of Service Vulnerability ... Finjan SurfinGate File Extension File Filter Circumvention... ... MIT Kerberos Key Distribution Center Remote Format String... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #177
    ... RobotFTP Server Username Buffer Overflow Vulnerability ... Ipswitch IMail Server Remote LDAP Daemon Buffer Overflow Vul... ... Microsoft Windows XP Help And Support Center Interface Spoof... ...
    (Focus-Microsoft)