Adobe.Reader.Spell.CustomDictionaryOpen.Remote.Code.Execution

Release Date Aug 30, 2011
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a vulnerability in Adobe Reader and Acrobat. The vulnerability is caused by a memory corruption error when the software handles malicious data passed to the JavaScript method "customDictionaryOpen". It may allow a remote attacker to execute arbitrary code via sending a crafted PDF file.
Affected Products Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 9.1
Recommended Actions Currently we are not aware of any patches supplied by the vendor for this issue.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1493
Reference/s http://www.frsirt.com/english/advisories/2009/1189 (FrSIRT) http://www.securityfocus.com/bid/34740 (BugTraq) http://www.milw0rm.com/exploits/8570

Fortinet