Check Point Advisories

Preemptive Protection against Adobe PDF File LoadImageA RMA JavaScript Multiple Code Execution Vulnerabilities (APSB11-24; CVE-2011-2439)

Check Point Reference:	CPAI-2011-448
Date Published:	4 Oct 2011
Severity:	Critical
Last Updated:	Saturday 01 January, 2011
Source:	APSB11-24
Industry Reference:	CVE-2011-2439 CVE-2011-2442
Protection Provided by:
Who is Vulnerable?	Adobe Reader X (10.1) and earlier 10.x versions for Windows and Macintosh Adobe Reader 9.4.5 and earlier 9.x versions for Windows, Macintosh and UNIX Adobe Reader 8.3 and earlier 8.x versions for Windows and Macintosh Adobe Acrobat X (10.1) and earlier 10.x versions for Windows and Macintosh Adobe Acrobat 9.4.5 and earlier 9.x versions for Windows and Macintosh Adobe Acrobat 8.3 and earlier 8.x versions for Windows and Macintosh
Vulnerability Description	Multiple code execution vulnerabilities have been reported in Adobe Reader and Acrobat.
Update/Patch Avaliable	Apply Updates Here
Vulnerability Details	The vulnerabilities are due to incorrect memory allocation while parsing specially crafted PDF files. A remote attacker may exploit these vulnerabilities by enticing an unsuspecting user to open a malicious PDF document file. Successful exploitation would allow an attacker to execute code in the target system, in the security context of the logged-on user.