Adobe Pagemaker MAIPM6.dll PMD font name buffer overflow
| adobe-pagemaker-bo (37041) |  High Risk |
Description:
Adobe Pagemaker is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by MAIPM6.DLL. By persuading a victim to open a specially-crafted .PMD file containing an overly long font name, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Platforms Affected:
- Adobe, Pagemaker 7.0.1
- Adobe, Pagemaker 7.0.2
Remedy:
Refer to APSB07-15 for patch, upgrade, or suggested workaround information. See References.
Consequences:
Gain Access
References:
- Adobe Web site, Adobe Pagemaker 7 at http://www.adobe.com/products/pagemaker/.
- APSB07-15, Patch available for PageMaker buffer overflow vulnerability at http://www.adobe.com/support/security/bulletins/apsb07-15.html.
- vuln.sg Web site, Adobe PageMaker Long Font-Name Buffer Overflow Vulnerability at http://vuln.sg/pagemaker701-en.html.
- BID-25989: Adobe PageMaker MAIPM6.dll Long Font Name Buffer Overflow Vulnerability
- CVE-2007-5169: Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arbitrary code via a long font name in a .PMD file.
- FrSIRT/ADV-2007-3441: Adobe PageMaker Font Name Processing Buffer Overflow Vulnerability
- SA27158: Adobe Pagemaker Long Font Name Buffer Overflow Vulnerability
- SECTRACK ID: 1018791: Adobe PageMaker Buffer Overflow in `MAIPM6.dll` Lets Users Execute Arbitrary Code
Reported:
Oct 09, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net