This application requires Javascript for optimal performance.

Adobe.JPEG2000.QCC.Memory.Corruption

Release Date

Oct 13, 2009

Severity

critical

Impact

System Compromise: Attackers can gain remote control of vulnerable systems.

Description

This indicates an attack attempt against a memory-corruption vulnerability in Adobe Reader and Acrobat.

The vulnerability is caused by an error that occurs when the vulnerable software handles a specially crafted PDF file.

Affected Products

Adobe Reader 9.1.3 and earlier versions
Adobe Acrobat 9.1.3 and earlier versions

Recommended Actions

Upgrade to the latest versions.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-2994

Reference/s

http://www.securityfocus.com/bid/36689 (BugTraq)

Reference: VID-17781