Adobe.Reader.Font.Parsing.Integer.Overflow

Release Date Aug 13, 2010
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against an integer-overflow vulnerability in Adobe Acrobat and Reader. The vulnerability is caused by an error when the vulnerable software handles PDF files with a malformed value for a certain TrueType Font field. It allows a remote attacker to execute arbitrary code via sending a crafted PDF file.
Affected Products Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3
Recommended Actions Do not open untrusted PDF files.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-2862
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-17.html http://www.frsirt.com/english/advisories/2010/2004 (FrSIRT) http://www.securityfocus.com/bid/42203 (BugTraq)

Fortinet