The table below lists the vulnerabilities addressed by Adobe on June 29, 2010.

Adobe Vulnerability Identifier	Adobe Bulletin Description	Severity	Affected Software	CVE ID
APSB10-15	These vulnerabilities, including CVE-2010-1297 referenced in Security Advisory APSA10-01, could cause the application to crash and could potentially allow an attacker to take control of the affected system.	Critical	Adobe Reader and Acrobat	CVE-2010-1240 CVE-2010-1285 CVE-2010-1295 CVE-2010-1297 CVE-2010-2168 CVE-2010-2201 CVE-2010-2202 CVE-2010-2203 CVE-2010-2204 CVE-2010-2205 CVE-2010-2206 CVE-2010-2207 CVE-2010-2208 CVE-2010-2209 CVE-2010-2210 CVE-2010-2211 CVE-2010-2212

Threat Remediation

Fortinet has provided coverage on these Adobe vulnerabilities since June 24, 2010.

CVE Number	Signature Name
CVE-2010-1240	PDF.With.Launch.Action
CVE-2010-1285	Adobe.Flash.Player.Authplay.DLL.SWF.Handling.Code.Execution
CVE-2010-2168	Adobe.Reader.PDF.File.Embeded.Stream.Code.Execution [previous name: Adobe.0day.23641]
CVE-2010-2201	Adobe.Reader.PDF.File.Invalid.Pointer.Code.Execution [previous name: Adobe.0day.23642]
CVE-2010-2202	Adobe.PDF.3difr.x3d.Memory.Corruption [previous name: Adobe.0day.23644]
CVE-2010-2203	Adobe.Reader.RichMedia.Memory.Corruption
CVE-2010-2204	Adobe.Reader.Acrobat.PDF.File.Memory.Corruption [previous name: Adobe.0day.23650]
CVE-2010-2207	Adobe.Reader.Cooltype.Compressed.Stream.Code.Execution [previous name: Adobe.0day.23647]
CVE-2010-2208	Adobe.Reader.Crafted.Oject.Code.Execution [previous name: Adobe.0day.23649]
CVE-2010-2209	Adobe.Reader.CoolType.DLL.PDF.Handling.Memory.Corruption [previous name: Adobe.0day.23643]
CVE-2010-2210	Adobe.PDF.Malformed.Stream.Memory.Corruption [previous name: Adobe.0day.23646]
CVE-2010-2211	Adobe.PDF.Malformed.ICCBased.Memory.Corruption [previous name: Adobe.0day.23640]

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Wednesday, June 30 2010	1	Initial Documentation.

Reference:

• Adobe Security Bulletin Summary for June 29, 2010: http://www.adobe.com/support/security/bulletins/apsb10-15.html