Adobe.Reader.U3D.Mesh.Declaration.Memory.Corruption

Release Date Oct 14, 2009
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attempt to exploit a memory corruption vulnerability in Adobe Reader. The vulnerability is caused by an error that occurs when the vulnerable software parses a malformed CLOD Mesh Declaration block in U3D file embeded in a PDF file. It allows a remote attacker to execute arbitrary code via sending a crafted PDF file.
Affected Products Adobe Reader 9.1.3 and older versions
Recommended Actions Currently we are not aware of any vendor supplied patch for this issue.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-2998

Fortinet