Acrobat and Reader contain a flaw that may allow an attacker to execute arbitrary code. The issue is triggered by a use-after-free condition in Doc.media.newPlayer when parsing a specially crafted PDF file.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public,
Exploit Commercial,
Virus / Malware
Disclosure:
Vendor Verified,
Uncoordinated Disclosure,
Uncoordinated Disclosure,
Discovered in the Wild
Solution
Upgrade to version 9.3 or higher for Windows, or 8.2 or higher for Mac, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
