This application requires Javascript for optimal performance.

Adobe.Acrobat.COM.Objects.Memory.Corruption

Release Date

Oct 15, 2009

Severity

high

Impact

System Compromise.

Description

This indicates an attempt to exploit a memory corruption vulnerability in Adobe Reader and Acrobat.

The vulnerability is caused by an error that occurs when the vulnerable software handles specially crafted COM objects. It allows a remote attacker to execute arbitrary code.

Affected Products

Adobe Reader version 9.1.3 and previous versions
Adobe Reader version 8.1.6 and previous versions
Adobe Reader version 7.1.3 and previous versions
Adobe Acrobat version 9.1.3 and previous versions
Adobe Acrobat version 8.1.6 and previous versions
Adobe Acrobat version 7.1.3 and previous versions

Recommended Actions

Upgrade to Adobe Acrobat and Reader versions 9.2, 8.1.7, or 7.1.4:

http://www.adobe.com/go/gntray_prod_acrobat_family_home

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-2983

Reference/s

http://www.frsirt.com/english/advisories/2009/2898 (FrSIRT)
http://www.securityfocus.com/bid/36668 (BugTraq)

Reference: VID-17828