[NT] Adobe Acrobat/Reader Information Disclosure (XML External Entity)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Adobe Acrobat/Reader Information Disclosure (XML External Entity)
------------------------------------------------------------------------

SUMMARY

" <http://www.adobe.com/products/acrobatstd/main.html> Acrobat is the
Adobe family of PDF (Portable Document Format) file editors and viewers(
<http://en.wikipedia.org/wiki/Adobe_Reader> wiki)."

Exploiting flaws in XML parsing of Adobe Acrobat and Adobe Reader allows
remote attacker to discover the existence of local files on a vulnerable
system.

DETAILS

Vulnerable Systems:
* Adobe Reader 7.0, 7.0.1.
* Adobe Acrobat 7.0, 7.0.1

Immune Systems:
* Adobe Reader 7.0.2 ( <http://www.adobe.com/support/downloads/> here)
* Adobe Acrobat 7.0.2 ( <http://www.adobe.com/support/downloads/> here)

A vulnerability within Adobe Reader and Adobe Acrobat has been identified.
Under certain circumstances, using XML scripts it is possible to discover
the existence of local files.

The vulnerability is within the Adobe Reader control. If an XML script is
embedded in JavaScript, it is possible to discover the existence of local
files. An attacker could then use the information gathered for malicious
purposes.

However the impact is minimized due to the fact that the existence of
local files can only be discovered if the complete filenames and paths are
known in advance by the attacker.

More information about vulnerability:
<http://www.securiteam.com/securitynews/6D0100A5PU.html> XXE (Xml
eXternal Entity) Attack

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1306>
CAN-2005-1306

ADDITIONAL INFORMATION

The original article can be found at:
<http://www.adobe.com/support/techdocs/331710.html>
http://www.adobe.com/support/techdocs/331710.html

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.