Adobe.Reader.Javascript.newplayer.Method.Code.Execution

Release Date Dec 17, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a zero-day vulnerability in Adobe Reader and Acrobat. The vulnerability is caused by an error when the vulnerable software handles a specially crafted PDF file that could allow remote attackers to execute arbitrary code.
Affected Products Adobe Reader 9.2 and earlier versions Adobe Acrobat 9.2 and earlier versions
Recommended Actions Apply the patch supplied by the vendor: http://www.adobe.com/support/security/bulletins/apsb10-02.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-4324
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-02.html http://www.adobe.com/support/security/advisories/apsa09-07.html http://www.securityfocus.com/bid/37331 (BugTraq)

Fortinet