Multiple vulnerabilities have been reported in in Adobe Reader / Acrobat, which can be exploited by malicious people to compromise a user's system.

1) The application bundles a vulnerable version of Flash Player (authplay.dll).

For more information:
SA40907

2) An integer overflow error in CoolType.dll when parsing the "maxCompositePoints" field value in the "maxp" (Maximum Profile) table of a TrueType font can be exploited to corrupt memory via a PDF file containing a specially crafted TrueType font.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in Adobe Reader versions 8.2.3 and 9.3.3 and Adobe Acrobat version 9.3.3. Prior versions may also be affected.

Solution
Update to version 9.3.4 or 8.2.4.
Further details available in Customer Area

Provided and/or discovered by
2) Charlie Miller, Independent Security Evaluators. The vendor also credits Tavis Ormandy, Google Security Team.

Changelog
Further details available in Customer Area

Original Advisory
Crash analysis with BitBlaze (page 51 - 58):
http://securityevaluators.com/files/papers/CrashAnalysis.pdf

Adobe:
http://www.adobe.com/support/security/bulletins/apsb10-17.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area