Check Point Advisories

Preemptive Protection against Adobe Reader and Acrobat Embedded BMP Malicious JavaScript Memory Corruption (APSB12-01; CVE-2011-4372)

Check Point Reference:	CPAI-2012-031
Date Published:	17 Jan 2012
Severity:	Critical
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2011-4372 CVE-2011-2438
Protection Provided by:
Who is Vulnerable?	Adobe Reader X (10.1.1) and earlier 10.x versions for Windows and Macintosh Adobe Reader 9.4.7 and earlier 9.x versions for Windows Adobe Reader 9.4.6 and earlier 9.x versions for Macintosh Adobe Acrobat X (10.1.1) and earlier 10.x versions for Windows and Macintosh Adobe Acrobat 9.4.7 and earlier 9.x versions for Windows Adobe Acrobat 9.4.6 and earlier 9.x versions for Macintosh
Vulnerability Description	A memory corruption vulnerability has been reported in Adobe Reader and Acrobat.
Vulnerability Details	The vulnerability is due to an error while loading specially crafted BMP image resources from a PDF file. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected version of Adobe Reader or Acrobat. Successful exploitation could allow an attacker to take complete control of an affected system.