Multiple Adobe products contain a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system or cause a denial of service (DoS) condition. The vulnerability exists due to a memory corruption error in the affected software that is triggered when processing PDF files with embedded Flash content or standalone Flash files. An unauthenticated, remote attacker could exploit the vulnerability by luring a targeted user to view crafted Flash content using the affected software. The attacker could leverage the resulting memory corruption error to execute arbitrary code on the targeted system or cause a DoS condition. Functional code that exploits this vulnerability is available. Adobe has confirmed this vulnerability and released updated software.

Microsoft Internet Explorer contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to invalid memory operations when processing malformed websites. An unauthenticated, remote attacker could exploit the vulnerability by convincing a user to view a malicious website containing an embedded Microsoft Office document. If successful, the attacker could execute arbitrary code with the privileges of the user. Proof-of-concept code that exploits this vulnerability is publicly available. Microsoft has confirmed the vulnerability in a security bulletin and released software updates.

Apache Tomcat contains a vulnerability that could allow an unauthenticated, remote attacker to disclose sensitive information. The vulnerability that could allow an unauthenticated, remote attacker to enumerate usernames for the affected application. An unauthenticated, remote attacker could exploit this vulnerability by making crafted login requests to the affected application. These requests return different information depending on whether the username in the login request exists on the system. This information could be used as an aid to additional attacks. Apache has confirmed this vulnerability and released updated software.

Adobe Acrobat and Reader contain multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The updates contain fixes for four vulnerabilities. Two of the vulnerabilities are due to a memory corruption error in the affected software while handling JavaScript. Another vulnerability is due to an integer overflow error while handling TrueType Font (TTF) files. These updates also fix a vulnerability that could lead to a security bypass via the Adobe Reader installer. An unauthenticated, remote attacker could exploit these vulnerabilities to execute arbitrary code on a targeted system. To exploit the vulnerability, the attacker may provide a file to the user and persuade the user to open or execute the file by using misleading language or instructions. The following products are vulnerable: * Adobe Reader versions prior to 10.1.3 for Microsoft Windows and Macintosh * Adobe Reader versions prior to 9.5.1 for Windows and Macintosh * Adobe Reader versions 9.4.6 and prior for Linux * Adobe Acrobat versions prior to 10.1.3 for Microsoft Windows and Macintosh * Adobe Acrobat versions prior to 9.5.1 for Windows and Macintosh The vulnerability addressed by CVE-2012-0777 affects only Macintosh and Linux systems. Users are advised not to open e-mail messages from suspicious or unrecognized sources. If users cannot verify that links or attachments included in e-mail messages are safe, they are advised not to open them. Adobe has released a security bulletin at the following link: APSB12-08["http://www.adobe.com/support/security/bulletins/apsb12-08.html"]. Adobe has released updates through automated mechanisms or at the following links: * Adobe Reader 10.1.3 for Windows["http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows"] * Adobe Reader 10.1.3 for Mac["http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh"] * Adobe Reader 9.5.1["http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows"] * Adobe Acrobat Standard and Professional 10.1.3 for Windows["http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows"] * Adobe Acrobat Professional for 10.1.3 Mac["http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh"] * Adobe Acrobat Professional Extended 10.1.3 for Windows["http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows"] * Adobe Acrobat 9.5.1["http://www.adobe.com/support/downloads/detail.jsp?ftpID=5357"] * Adobe Reader 9.5.1 for Linux["ftp://ftp.adobe.com/pub/adobe/reader/unix/9.x/"] Red Hat has released a security advisory at the following link: RHSA-2012-0469["https://rhn.redhat.com/errata/RHSA-2012-0469.html"]. Red Hat packages can be updated using the yum or update command.

Spyeye is a trojan malicious software tool that is used to build malicious software and perform command-and-control (C&C) functions for infected systems. The malicious software constructed using the toolkit is similar to the Zeus bot and, once installed on a system, allows backdoor administrative access and information-gathering functions. The trojan has been observed to target web browsers such as Mozilla Firefox and Internet Explorer on Windows systems and could be installed manually or distributed via other means, such as web exploit toolkits. When executed, the trojan could create cleansweep.exe\config.bin and cleansweep.exe\cleansweep.exe files that could allow a remote attacker to capture the network traffic from the targeted user's browser and transmit the information to unspecified arbitrary hosts on the Internet. Administrators are advised to run both firewall and antivirus applications to minimize the potential of inbound and outbound threats.

Microsoft Internet Explorer contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to invalid memory operations when processing malformed websites. An unauthenticated, remote attacker could exploit the vulnerability by convincing a user to view a malicious website containing an embedded Microsoft Office document. If successful, the attacker could execute arbitrary code with the privileges of the user. Proof-of-concept code that exploits this vulnerability is publicly available. Microsoft has confirmed the vulnerability in a security bulletin and released software updates.