HTTP: Adobe Acrobat TrueType Font Handling Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat and Reader. A successful attack can lead to arbitrary code execution.

Extended Description

Adobe Acrobat and Reader are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. The following products are affected: Adobe Reader 9.3.1 and prior for Windows, Macintosh, and UNIX Adobe Acrobat 9.3.1 and prior for Windows and Macintosh Adobe Reader 8.2.1 and prior for Windows and Macintosh Acrobat 8.2.1 and prior for Windows and Macintosh NOTE: This issue was originally documented in BID 39329 (Adobe Acrobat and Reader April 2010 Multiple Remote Vulnerabilities); it has been assigned its own BID to better document the vulnerability.

Affected Products

Red_hat enterprise_linux_as_extras

References

BugTraq: 39417

CVE: CVE-2010-0195

Short Name

HTTP:STC:ADOBE:CVE-2010-0195-CE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Adobe Acrobat TrueType Font Handling Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?