Release DateDec 17, 2009 |
Severitycritical |
ImpactSystem Compromise |
DescriptionThis indicates a possible attack against a buffer-overflow vulnerability in Adobe Reader and Acrobat.The vulnerability is caused by improper checking of user-supplied input. A remote attacker may expoit this to execute arbitrary code via a specially crafted .pdf file. |
Affected ProductsAdobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIXAdobe Acrobat 9.2 and earlier versions for Windows and Macintosh |
Recommended ActionsAn update is available at the following webpage:http://www.adobe.com/support/security/bulletins/apsb10-02.html |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2009-3953 |
Reference/shttp://www.adobe.com/support/security/bulletins/apsb10-02.htmlhttp://www.securityfocus.com/bid/37758 (BugTraq) |