The table below lists the vulnerabilities addressed by Adobe on February 11, 2010.

Adobe Vulnerability Identifier	Adobe Bulletin Description	Severity	Affected Software	CVE ID
APSB10-05	A vulnerability that could result in disclosure of information when processing XML.	Important	Adobe BlazeDS, Adobe LiveCycle, Adobe LiveCycle Data Services, Adobe Flex Data Services,Adobe ColdFusion	CVE-2009-3960
APSB10-06	A vulnerability that could subvert the domain sandbox and make unauthorized requests.	Critical	Adobe Flash Player, Adobe AIR	CVE-2010-0186 CVE-2010-0187

Threat Remediation

Fortinet provides coverage on Adobe vulnerabilities in February 11, 2010.

CVE Number	Signature Name
CVE-2009-3960	Adobe.XML.Entity.Injection
CVE-2009-3960	Adobe.XML.Tag.Injection
CVE-2010-0187	Adobe.Shockwave.Flash.DoS

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Thursday, February 11 2010	1	Initial Documentation.

Reference:

• Adobe Security Bulletin Summary for February 11, 2010:
• http://www.adobe.com/support/security/bulletins/apsb10-05.html
• http://www.adobe.com/support/security/bulletins/apsb10-06.html