# MA-271.022011: MyCERT Alert - Multiple Critical Vulnerabilities in Adobe Reader and Adobe Acrobat

**Date:** 09 Feb 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-271.022011  
**Advisory ID:** MA-271.022011

---

**1.0 Introduction**
Multiple critical vulnerabilities have been identified in Adobe Reader X 10.0, Adobe Acrobat X 10.0 and earlier. These vulnerabilities could cause the application to crash and could potentially execute arbitrary code on the affected system.
Risk for Adobe Reader X users is significantly lower, as none of these issues bypass Protected Mode mitigations. [1]
**2.0 Impact**
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat and Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. [2]
**3.0 Affected Products**
Majority of the Adobe Reader and Adobe Acrobat versions are prone to these vulnerabilities. Below is the list of vulnerable products:
- Adobe Reader X (10.0) and for Windows and Macintosh
- Adobe Reader 9.4.1 and earlier versions for Windows, Macintosh and UNIX
- Adobe Acrobat X (10.0) and earlier versions for Windows and Macintosh
**4.0 Recommendation**
Users can utilize the product's update mechanism. The default configuration is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
MyCERT advises users of the products mentioned in this advisory to keep themselves updated with the latest security announcements from the products' vendor. MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#620f1b01071016220f1b010710164c0d10054c0f1b)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
1. <https://www.adobe.com/support/security/bulletins/apsb11-03.html>
2. <http://www.zerodayinitiative.com/advisories/ZDI-11-075/>