Release DateJan 12, 2010 |
Severityhigh |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems. |
DescriptionThis indicates an attempt to exploit a code-execution vulnerability in the Adobe get_atlcom Class.The vulnerability is located in the "gp.ocx" ActiveX control through misuse of multiple vulnerable properties. It may allow remote attackers to execute arbitrary code in vulnerable systems. |
Affected ProductsAdobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIXAdobe Acrobat 9.2 and earlier versions for Windows and Macintosh |
Recommended ActionsApply the patch supplied by the vendor:http://www.adobe.com/support/security/bulletins/apsb10-02.html |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2009-3958CVE-2010-1278 |