Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Adobe Acrobat 9.x
Adobe Acrobat 8.x
Adobe Reader 9.x
Adobe Reader 8.x
Unaffected system:
Adobe Acrobat Standard 9.4.2
Adobe Acrobat Standard 10.0.1
Adobe Acrobat Professional 9.4
Adobe Acrobat Professional 10.
Adobe Acrobat 9.4.2
Adobe Acrobat 10.0.1
Adobe Reader 9.4.2
Adobe Reader 10.0.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46216
Cve id: CVE-2011-0594

Adobe Reader and Acrobat are popular pdf file readers.

Adobe Reader and Acrobat have a font parsing vulnerability. Remote attackers can trick users into processing PDF files containing malformed fonts and execute arbitrary code in the user system.

<* Source: Tavis Ormandy
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Adobe
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.adobe.com