Intrusion Prevention

Adobe.Reader.U3D.Progressive.Mesh.Block.Memory.Corruption

Description

This indicates an attempt to exploit a Memory Corruption vulnerability in Adobe Reader.
The vulnerability is caused by an error that occurs when the software parses a malformed "CLOD Progressive Mesh Continuation Block" in a "U3D" file embeded in a PDF file. It allows a remote attacker to execute arbitrary code via sending a crafted PDF file.

Affected Products

Adobe Reader 9.1.3 and older versions.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

CVE References

CVE-2009-3458 CVE-2009-2990