VIA Root
VIARoot Security News Security alerts Business IT security Services Security Tools About VIARoot
Adobe Illustrator Encapsulated Postscript Parsing Vulnerability
Search
Security News
25% Of Malware Spread Via USB Drives
 security
Mathew J. Schwartz, InformationWeek
2010-08-27 14:11:17
Email and peer-to-peer networks also rank as significant venues for malware attacks, which have increased slightly in the U.S. but declined in Europe, according to Panda Security.
Intel Buys McAfee
 intel
Hugo Jean, Heptacube Inc.
2010-08-24 14:51:53
The motivation behind the $7.68 billion deal is unclear, but Intel says it wants to integrate computer security into its hardware.
IT Directory
Wiseleap Solutions Inc.
Founded in 2005, Wiseleap Solutions Inc.'s mission consists in providing companies with the information necessary to make cri [...]
IT Ration Consulting Inc.
IT-Ration Consulting inc has been a NetSuite Partner since 2005 and helps your enterprise grow by aligning your Information T [...]
HumanWare
Empowering People Focused on enhancing the lives of people with visual and learning disabilities, HumanWare provide [...]
By secunia.com
 adobe
2009-12-03 11:57:29

Description:
pyrokinesis has discovered a vulnerability in Adobe Illustrator, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the parsing of Encapsulated Postscript Files (.eps) and can be exploited to corrupt memory when a user opens a specially crafted .eps file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version CS3 13.0.0 and CS4 14.0.0. Other versions may also be affected.

Solution:
Do not open files from untrusted sources.

Provided and/or discovered by:
Nine:Situations:Group::pyrokinesis

Original Advisory:
http://retrogod.altervista.org/9sg_adobe_illuso.html

No CVE references.

Reference 1: http://secunia.com/advisories/37563/2/
Tags
Adobe CS3 CS4 eps Illustrator 

© 2006-2010 Heptacube Inc.