🚀 go-pugleaf

Perhaps this may be of some help.

Adobe has released a patch which addresses a critical flaw in Adobe Acrobat products. Affected products include:

Adobe Reader versions 9.x
Adobe Reader versions 8.x
Adobe Reader versions 7.x
Adobe Acrobat Standard versions 9.x
Adobe Acrobat Standard versions 8.x
Adobe Acrobat Standard versions 7.x
Adobe Acrobat Pro versions 9.x
Adobe Acrobat Pro versions 8.x
Adobe Acrobat Pro versions 7.x
Adobe Acrobat Pro Extended versions 9.x

The vulnerability can cause Adobe application to crash and more importantly allow an attacker to take control of an affected system. This issue is caused by an array indexing error when processing a malformed JBIG2 stream within a PDF document, which could allow attackers to cause a vulnerable application to crash or execute arbitrary code by tricking a user into opening a specially crafted PDF file. Visiting a compromised website or opening attachments are two possible ways that the exploit can be delivered.

US Cert published 2 new attack vectors on March 10th: (http://www.us-cert.gov/current/)

�When Adobe Reader is installed on a system, it adds an IFilter that allows applications such as the Windows Indexing Service to index PDF files. If the Windows Indexing Service processes a malicious PDF file stored on the system, the vulnerability can be exploited. Exploitation using this technique can require little to no user interaction.

In addition to adding an IFilter, the Adobe Acrobat and Reader installation process adds a Windows Explorer Shell Extension. If Windows Explorer displays a folder that contains a malicious PDF file, the vulnerability can be exploited. Exploitation using this technique also requires little to no user interaction.�

The exploit has been in the wild for some time and detections of this exploit have been seen on systems in the USGS already via the USGS enterprise Antivirus Service (http://itsot.usgs.gov/dmz/evirus/index.html).

It is therefore highly suggested that all systems are patched to address this vulnerability. Adobe has released a fix for version 9 (updating to 9.1), Version 7 and 8 patches will be available by March 18, 2009. This even seems to affect Unix OS based systems as Adobe states all platforms are affected by this vulnerability.

More info from Adobe website concerning this vulnerability are available here: <http://www.adobe.com/support/security/bulletins/apsb09-03.html>

Have fun