1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Labs
  2. Security Threats
  3. Vulnerability Reports
  4. SA200903609

Adobe Reader/Acrobat SWF Content Arbitrary Code Execution

Report ID: SA200903609
Source: Secunia
Date of Discovery: 23.07.2009
Criticality: Critical
Affects:
Adobe Acrobat 9.x
Adobe Reader 9.x
Compromise From: From remote
Compromise Type: System access

Summary

A vulnerability has been reported in Adobe Reader and Acrobat, which can be exploited by malicious people to compromise a user's system.

Detailed Description

A vulnerability has been reported in Adobe Reader and Acrobat, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in authplay.dll when processing SWF content and can be exploited to execute arbitrary code.

NOTE: The vulnerability is currently being actively exploited.

The vulnerability is reported in version 9.1.2 and prior 9.x versions.

Solution

Original Reference

-