Check Point Advisories

Adobe Acrobat and Reader PDF Malicious Stream Code Execution (APSB12-16; CVE-2012-4159)

Check Point Reference:	CPAI-2012-423
Date Published:	9 Oct 2012
Severity:	Critical
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2012-4159
Protection Provided by:
Who is Vulnerable?	Adobe Reader X (10.1.3) and earlier 10.x versions for Windows and Macintosh Adobe Reader 9.5.1 and earlier 9.x versions for Windows and Macintosh Adobe Acrobat X (10.1.3) and earlier 10.x versions for Windows and Macintosh Adobe Acrobat 9.5.1 and earlier 9.x versions for Windows and Macintosh
Vulnerability Description	A remote code execution vulnerability has been reported in Adobe Acrobat and Reader.
Update/Patch Avaliable	Apply patches from: APSB12-16
Vulnerability Details	The vulnerability is due to an invalid memory access. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would allow an attacker to execute arbitrary code on the target.