Adobe.Acrobat.GetIcon.Method.Stack.Overflow

Release Date Apr 28, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Adobe Reader and Adobe Acrobat. The vulnerability is caused by an error when the vulnerable software handles a malicious JavaScript. It allows a remote attacker to execute arbitrary code via sending a crafted pdf file.
Affected Products Adobe Reader and Adobe Acrobat 9.1 and 7.1.1
Recommended Actions Refer to the vendor's web site for the suggested workaround: http://www.adobe.com/support/security/bulletins/apsb09-04.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-0927
Reference/s http://milw0rm.org/exploits/9579 http://milw0rm.com/exploits/8595 http://www.securityfocus.com/bid/34169 (BugTraq) http://www.zerodayinitiative.com/advisories/ZDI-09-014/

Fortinet