Adobe.Reader.U3D.Mesh.Declaration.Memory.Corruption

Description

This indicates an attempt to exploit a memory corruption vulnerability in Adobe Reader.
The vulnerability is caused by an error that occurs when the vulnerable software parses a malformed CLOD Mesh Declaration block in U3D file embeded in a PDF file. It allows a remote attacker to execute arbitrary code via sending a crafted PDF file.

Affected Products

Adobe Reader 9.1.3 and older versions

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

References