A memory corruption flaw exists in Adobe Reader and Acrobat. The program fails to sanitize user-supplied input when an unspecified error occurs resulting in a memory corruption. This may allow an attacker to execute arbitrary code.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade to version 9.5 or higher or 10.1.2 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
