Roy Firestein

Exploit Released for Adobe Illustrator Zero Day Flaw

December 4th, 2009. Published under My Recent Reads. No Comments.

pulled from Google Reader (click on title for original post)

Adobe’s
security response team is scrambling to deal with the release of
exploit code for what appears to be a critical zero-day flaw in the
Adobe Illustrator CS4 software product.

The vulnerability is caused due to an error in the parsing of
Encapsulated Postscript Files (.eps) and can be exploited to corrupt
memory when a user opens a specially crafted .eps file. Successful
exploitation allows execution of arbitrary code.