Secunia

NGSSoftware has discovered a vulnerability in Adobe Acrobat Reader, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the debugging functionality when parsing documents in the XML forms data format (".xfdf"). This can be exploited to cause a buffer overflow by tricking a user into viewing a specially crafted XFDF document.

The vulnerability has been reported in version 5.1 on the Windows platform. Reportedly other platforms are not vulnerable.

Solution
The vendor reports that the vulnerability isn't present in the current version of Adobe Reader.
Further details available in Customer Area

Provided and/or discovered by
David Litchfield, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
http://www.ngssoftware.com/advisories/adobexfdf.txt

Deep Links
Links available in Customer Area