The table below lists the vulnerabilities addressed by Adobe on January 12, 2010.

Adobe Vulnerability Identifier	Adobe Bulletin Title	Severity	Affected Software	CVE ID
apsb10-02	Vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.	Critical	Adobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIX,Adobe Acrobat 9.2 and earlier versions for Windows and Macintosh	CVE-2009-3953 CVE-2009-3954 CVE-2009-3955 CVE-2009-3956 CVE-2009-3957 CVE-2009-3958 CVE-2009-3959 CVE-2009-4324

Threat Remediation

Fortinet provides coverage on Adobe vulnerabilities in January 12, 2010.

CVE Number	Signature Name
CVE-2009-3953	Adobe.U3D.CLOD.Mesh.Declaration.Array.Buffer.Overflow
CVE-2009-3955	Adobe.Reader.JpxDecode.Jp2c.Stream.Memory.Corruption
CVE-2009-3956	Adobe.Reader.FDF.Javascript.Execution
CVE-2009-3957	Adobe.PDF.Colors.Code.Execution
CVE-2009-3958	Adobe.Get.Atlcom.ActiveX.Control.Access
CVE-2009-3959	Adobe.Acrobat.Reader.U3D.Content.Integer.Overflow
CVE-2009-4324	Adobe.Reader.Javascript.newplayer.Method.Code.Execution

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, January 12 2010	1	Initial Documentation.

Reference:

• Adobe Security Bulletin Summary for January 12, 2010: http://www.adobe.com/support/security/bulletins/apsb10-02.html