Adobe Reader X BMP/RLE heap corruption

[Nytro]

Adobe Reader X

BMP/RLE heap corruption

Adobe Reader X is a powerful software solution developed by Adobe Systems to view,

create, manipulate, print and manage les in Portable Document Format (PDF). Since

version 10 it includes the Protected Mode, a sandbox technology similar to the one in

Google Chrome which improves the overall security of the product.

Adobe Reader X fails to validate the input when parsing an embedded BMP RLE encoded

image. Arbitrary code execution in the context of the sandboxed process is proved possible

after a malicious bmp image triggers a heap over

ow.

Download:

http://t.co/ivC0BG33fh