The table below lists the Adobe vulnerabilities for December.

Adobe Vulnerability Identifier	Adobe Bulletin Title	Severity		Affected Software	CVE ID
APSB09-19	Vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.	Critical		Adobe Flash Player 10.0.32.18 and earlier versions,Adobe AIR 1.5.2 and earlier versions	CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800 CVE-2009-3951

Threat Remediation

Fortinet provides coverage on Adobe vulnerabilities in December 2009.

CVE Number	Signature Name
CVE-2009-3794	Adobe.Flash.Player.JPEG.Parsing.Heap.Overflow
CVE-2009-3797	FG-VD-09-024-Adobe (real name: Adobe.Flash.Getproperty.Memory.Corruption)
CVE-2009-3798	FG-VD-09-026-Adobe (real name: Adobe.Flash.Class.Switch.Memory.Corruption)
CVE-2009-3951	Adobe.Flash.Local.File.Check.Disclosure

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, December 8, 2009	1	Initial Documentation.

Reference:

• Adobe Security Bulletin Summary for December 2009: http://www.adobe.com/support/security/bulletins/apsb09-19.html