Arr1val has discovered two vulnerabilities in Adobe Reader, which can be exploited by malicious people to potentially compromise a user's system.

1) An error when processing calls to the "getAnnots()" JavaScript method can be exploited to corrupt memory via a specially crafted PDF file.

2) An error when processing calls to the "customDictionaryOpen()" JavaScript method can be exploited to corrupt memory via a specially crafted PDF file.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities are confirmed in version 9.1 for Linux. Other versions may also be affected.

Solution
Update to a fixed version. Please see the vendor's advisory for more information.
Further details available to Secunia VIM customers

Provided and/or discovered by
Arr1val

Changelog
Further details available to Secunia VIM customers

Original Advisory
Arr1val:
http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt
http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt

Adobe:
http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html
http://www.adobe.com/support/security/advisories/apsa09-02.html
http://www.adobe.com/support/security/bulletins/apsb09-06.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers