Adobe released its Black Tuesday bulletin too: apsb12-08.html announcing updates of Adobe Reader and Adobe Acrobat to versions 9.5.1 and 10.1.3.

They're fixing 4 vulnerabilities:

• CVE-2012-0774: integer overflow in the True Type Font (TTF) handling
• CVE-2012-0775: memory corruption in the JavaScript handling
• CVE-2012-0776: security bypass via the Adobe Reader installer
• CVE-2012-0777: memory corruption in the JavaScript API

All allowing to random code execution.

This update also incorporates the recent changes to flash for the version "X" (10.1.3).

--
Swa Frantzen -- Section 66