Update Protection against PNG Image Invalid sPLT Chunk Vulnerability
| Check Point Reference: | CPAI-2009-256 | |
| Date Published: | ||
| Severity: | ||
| Source: | Adobe Security Bulletin - APSB09-15 | |
| Industry Reference(s): | CVE-2009-2984 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Adobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh | ||
| Vulnerability Description A denial of service vulnerability has been discovered in Adobe Acrobat. A remote attacker may trigger this issue via a specially crafted PNG file. The Portable Network Graphics (PNG) specification is an image format used as an alternative to other image formats such as the GIF and TIFF formats. Successful exploitation of this issue will cause the application to become non-responsive. |
||
|
Update/Patch Available Update patches: Adobe Security Bulletin - APSB09-15 |
|
|
Vulnerability Details The vulnerability is due to the way that Adobe Acrobat handle malformed PNG files. A remote attacker may trigger this issue by convincing a user to open a specially crafted PNG image file. Successful exploitation will create a denial of service condition, causing the application to become non-responsive. |
Protection Overview
This protection will detect and block attempts to transfer malformed PNG files over HTTP.
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.