This application requires Javascript for optimal performance.

Adobe.Reader.CoolType.DLL.PDF.Handling.Memory.Corruption

Release Date

Jun 29, 2010

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a remote code-execution vulnerability in Adobe Reader and Acrobat.

The vulnerability is caused by an error when CoolType.dll handles a specially crafted PDF file. It allows a remote attacker to execute arbitrary code.

Affected Products

Adobe Reader 9.3.2 and earlier versions for Windows, Macintosh, and UNIX
Adobe Acrobat 9.3.2 and earlier versions for Windows and Macintosh

Recommended Actions

Apply the patch from the vendor:
http://www.adobe.com/support/security/bulletins/apsb10-15.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-2209

Reference/s

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Reference: VID-23643