Summary:

Fortinet's FortiGuard Labs Protects Against a Vulnerability in Adobe Products.

Impact:

System Compromise

Risk:

Critical

Affected Software:

For a list of Adobe Products' versions affected, please see the references below.

Additional Information:

This vulnerability could allow an attacker to take control of the affected system by leveraging a vulnerability in Flash Player or authplay.dll component in Adobe Reader and Acrobat.

FortiGuard Labs continues to monitor this vulnerability world wide while developing additional mitigation strategies / solutions based off our findings.

Solutions:

• FortiGuard Labs released the following signature which covers this specific vulnerability
  • "Adobe.0day.23305" on June 08,2010

Fortinet customers who subscribe to Fortinet's intrusion prevention (IPS) service should be protected against this vulnerability. Fortinet's IPS service is one component of FortiGuard Subscription Services, which also offer comprehensive solutions such as antivirus, Web content filtering and antispam capabilities. These services enable protection against threats on both application and network layers. FortiGuard Services are continuously updated by FortiGuard Labs, which enables Fortinet to deliver a combination of multi-layered security intelligence and true zero-day protection from new and emerging threats. These updates are delivered to all FortiGate, FortiMail and FortiClient products. Fortinet strictly follows responsible disclosure guidelines to ensure optimum protection during a threat's lifecycle.

References:

• Adobe Security Advisory:http://www.adobe.com/support/security/advisories/apsa10-01.html
• CVE ID:CVE-2010-1297