Saturday, October 9, 2010

Adobe Reader ICC Parsing: Remote Code Execution Vulnerability

Users of Adobe Reader ICC Parsing please be advised of a Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
ZDI-10-191: [ZDI-10-191] Adobe Reader ICC Parsing Remote Code Execution Vulnerability
-- Affected Products:

Adobe Reader
-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of Adobe Reader. User interaction is required

in that a target must be coerced into opening a file or visiting a web

page.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment