Multiple vulnerability have been identified in Adobe Acrobat and Reader, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by array indexing and input validation errors when processing malformed JBIG2 data within a PDF document, which could allow attackers to cause a vulnerable application to crash or execute arbitrary code by tricking a user into opening a specially crafted PDF file.
Note: One of the vulnerabilities is being exploited in the wild.
Vulnerabilities reported by the vendor, Sean Larsson (iDefense Labs), Jonathan Brossard (iViZ Security Research Team), Will Dormann (CERT/CC), and Alin Rad Pop (Secunia Research).
