Description
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Adobe Illustrator CS4 v14.0.0
exploit/windows/fileformat/adobe_illustrator_v14_eps
Exploit-DB 3
- Adobe Illustrator CS4 14.0.0 - Postscript (.eps) Buffer Overflow (Metasploit) EDB-16669 · local · Sep 25, 2010 · verified
- Adobe Illustrator CS4 14.0.0 - eps Universal Buffer Overflow (Metasploit) EDB-10344 · local · Dec 7, 2009 · verified
- Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow EDB-10281 · local · Dec 3, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 60632 vdb-entry
- http://retrogod.altervista.org/9sg_adobe_illuso.html
- 37563 third-party-advisory
- http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html
- 1023276 vdb-entry
- ADV-2009-3396 vdb-entry
- 37192 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-01.html
- adobe-illustrator-eps-bo(54521) vdb-entry
- 20091203 Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit mailing-list