CERT-MU :Vulnerability

Home | Search | FAQ | Site Map | Contact Us

|| Hotline : 800 2378 || To contact CERT-MU send e-mail on --> info[at]cert-mu.gov.mu || To report incident e-mail on --> incident[at]cert-mu.gov.mu || To report Vulnerabilities send e-mail on --> Vulnerability[at]cert-mu.gov.mu ||

Charter & Mission

CERT-MU Services

Constituency

Authority

Incident Reporting

Vulnerability Reporting

Incident Statistics Forms

Vol. 2, Feb 2012

Vol. 1, Oct 2011

World CERTs

Security Sites

Security Tools

Antivirus Resources

Email Abuse

Network Abuse

Anti-Spam Initiative

Cyber Security Portal

Safer Internet Day

Computer Security Day

National Computer Board

Authorized to use CERT(TM) - CERT is a mark owned by Carnegie Mellon University

CERT-MU Vulnerability Note VN-2010-13

Adobe Flash Player, Acrobat Reader, and Acrobat 'authplay.dll' Remote Code Execution Vulnerability

Original Issue Date: June 8, 2010

Severity Rating: High

Systems Affected

Adobe Flash Player 10.0.45.2
Adobe Flash Player 9.0.262
Adobe Flash Player 10.0.x
Adobe Flash Player 9.0.x and earlier
Adobe Reader and Acrobat 9.3.2
Adobe Reader and Acrobat 9.x and earlier

Overview

A vulnerability has been reported in Adobe Flash Player, Acrobat Reader, and Acrobat which could allow remote code execution to take complete control of the systems installed with vulnerable versions of Adobe.

Description

This vulnerability is caused due to a vulnerable component "authplay.dll" of Adobe Reader and Acrobat. This vulnerability could be exploited by sending or enticing users to open specially crafted PDF file. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code to take complete control of the systems installed with vulnerable versions of Adobe. It has been reported that this vulnerability is exploiting in a wild and the exploit is detected as PDF/Pidief.RP.

Workarounds