The table below lists the Adobe vulnerabilities for October.

Adobe Vulnerability Identifier	Adobe Bulletin Title	Severity		Affected Software	CVE ID
apsb09-15	Vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.	Critical		Adobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX, Adobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh	CVE-2009-2979 CVE-2009-2980 CVE-2009-2984 CVE-2009-2985 CVE-2009-2987 CVE-2009-2988 CVE-2009-2989 CVE-2009-2990 CVE-2009-2991 CVE-2009-2992 CVE-2009-2993 CVE-2009-2994 CVE-2009-2995 CVE-2009-2996 CVE-2009-2997 CVE-2009-2998 CVE-2009-3458 CVE-2009-3460 CVE-2009-3459 CVE-2007-0048 CVE-2007-0045 CVE-2009-2564 CVE-2009-2981 CVE-2009-2982 CVE-2009-2983 CVE-2009-2986 CVE-2009-3431 CVE-2009-3461 CVE-2009-3462

Threat Remediation

Fortinet provides coverage on Adobe vulnerabilities in October 2009.

CVE Number	Signature Name
CVE-2009-2979	Adobe.Reader.Metadata.XML.Buffer.Overflow
CVE-2009-2980	Adobe.Reader.Xobject.Image.Integer.Overflow
CVE-2009-2985	Adobe.Reader.Font.CFF.Index.Memory.Corruption
CVE-2009-2987	Adobe.Acrobat.ActiveX.Control.DoS
CVE-2009-2988	Adobe.Acrobat.JS.Collab.DoS
CVE-2009-2990	Adobe.Reader.U3D.Progressive.Mesh.Block.Code.Execution
CVE-2009-2991	Adobe.Acrobat.Firefox.Plugin.RCE.Code.Execution
CVE-2009-2994	Adobe.JPEG2000.QCC.Memory.Corruption
CVE-2009-2996	Adobe.Acrobat.JS.Collab.Memory.Corruption
CVE-2009-2997	Adobe.Acrobat.U3D.Line.Set.Heap.Corruption
CVE-2009-2998	Adobe.Reader.U3D.Mesh.Declaration.Memory.Corruption
CVE-2009-3458	Adobe.Reader.U3D.Progressive.Mesh.Block.Code.Execution
CVE-2009-3460	Adobe.Acrobat.Javascript.Heap.Allocation.Memory.Corruption
CVE-2009-3459	Adobe.Reader.Decode.Color.Remote.Code.Execution
CVE-2007-0048	Adobe.Acrobat.Plugin.DoS
CVE-2007-0045	Adobe.Acrobat.Plugin.XSS
CVE-2009-2981	Adobe.Trust.Manager.Restrictions.Bypass
CVE-2009-2983	Adobe.Acrobat.COM.Objects.Memory.Corruption
CVE-2009-3431	Adobe.Acrobat.Stack.Exhaustion.DoS

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Wednesday, October 14, 2009	1	Initial Documentation.

Reference:

• Adobe Security Bulletin Summary for October 2009: http://www.adobe.com/support/security/bulletins/apsb09-15.html