The DOC.print function in the Adobe JavaScript API, as used...

Vulnerability Description

The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.

References

• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html
• http://securityreason.com/securityalert/3625
• http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1
• http://www.us-cert.gov/cas/techalerts/TA08-043A.html
• http://www.adobe.com/support/security/bulletins/apsb08-13.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9731
• http://www.vupen.com/english/advisories/2008/1966/references
• http://secunia.com/advisories/28851
• http://www.adobe.com/support/security/advisories/apsa08-01.html
• http://secunia.com/advisories/28983
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1
• http://security.gentoo.org/glsa/glsa-200803-01.xml
• http://www.vupen.com/english/advisories/2008/0425/references
• http://secunia.com/advisories/29065
• http://secunia.com/advisories/30840
• http://secunia.com/advisories/29205
• http://www.securityfocus.com/bid/27641
• http://www.fortiguardcenter.com/advisory/FGA-2008-04.html
• http://secunia.com/advisories/28802
• http://www.redhat.com/support/errata/RHSA-2008-0144.html
• http://www.securityfocus.com/archive/1/487760/100/0/threaded