A memory corruption flaw exists in Adobe Reader and Acrobat. The programs fail to sanitize unspecified user-supplied input resulting in memory corruption. With a specially crafted file, a context-dependent attacker can execute arbitrary code.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade to Adobe Reader X to version 10.1 or higher, or Adobe Reader and Acrobat to version 9.4.5 or 8.3 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
