[NT] Adobe Acrobat/Reader Information Disclosure (XML External Entity)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html 

- - - - - - - - -



  Adobe Acrobat/Reader Information Disclosure (XML External Entity)
------------------------------------------------------------------------


SUMMARY

" <http://www.adobe.com/products/acrobatstd/main.html> Acrobat is the 
Adobe family of PDF (Portable Document Format) file editors and viewers( 
<http://en.wikipedia.org/wiki/Adobe_Reader> wiki)."

Exploiting flaws in XML parsing of Adobe Acrobat and Adobe Reader allows 
remote attacker to discover the existence of local files on a vulnerable 
system.

DETAILS

Vulnerable Systems:
 * Adobe Reader 7.0, 7.0.1.
 * Adobe Acrobat 7.0, 7.0.1

Immune Systems:
 * Adobe Reader 7.0.2 ( <http://www.adobe.com/support/downloads/> here)
 * Adobe Acrobat 7.0.2 ( <http://www.adobe.com/support/downloads/> here)

A vulnerability within Adobe Reader and Adobe Acrobat has been identified. 
Under certain circumstances, using XML scripts it is possible to discover 
the existence of local files.

The vulnerability is within the Adobe Reader control. If an XML script is 
embedded in JavaScript, it is possible to discover the existence of local 
files. An attacker could then use the information gathered for malicious 
purposes.

However the impact is minimized due to the fact that the existence of 
local files can only be discovered if the complete filenames and paths are 
known in advance by the attacker.

More information about vulnerability:
 <http://www.securiteam.com/securitynews/6D0100A5PU.html> XXE (Xml 
eXternal Entity) Attack

CVE Information:
 <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1306> 
CAN-2005-1306


ADDITIONAL INFORMATION

The original article can be found at:  
<http://www.adobe.com/support/techdocs/331710.html> 
http://www.adobe.com/support/techdocs/331710.html



======================================== 


This bulletin is sent to members of the SecuriTeam mailing list. 
To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] 
In order to subscribe to the mailing list, simply forward this email to: [email protected] 


==================== 
==================== 

DISCLAIMER: 
The information in this bulletin is provided "AS IS" without warranty of any kind. 
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.