Check Point Advisories

Preemptive Protection against Adobe Reader Sandbox Local Privilege Escalation (APSB11-24; CVE-2011-1353)

Check Point Reference:	CPAI-2011-422
Date Published:	20 Sep 2011
Severity:	Critical
Last Updated:	Saturday 01 January, 2011
Source:	Adobe Security Bulletin APSB11-24
Industry Reference:	CVE-2011-1353
Protection Provided by:
Who is Vulnerable?	Adobe Reader X (10.1) and earlier Adobe Acrobat X (10.1) and earlier (for Windows and Macintosh)
Vulnerability Description	A privilege escalation vulnerability has been reported in Adobe Reader.
Update/Patch Avaliable	Apply patches from here
Vulnerability Details	The vulnerability is due to an error in the way Adobe Reader verifies which registry keys are accessed. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file. Successful exploitation of this issue will allow an attacker to take complete control over an affected system.