Fortinet Discovers Critical Vulnerabilities for Adobe Acrobat Professional and Adobe Reader

Fortinet® -- the pioneer and leading provider of unified threat management (UTM) solutions -- today announced that its FortiGuard(TM) Global Security Research Team has discovered vulnerabilities in Adobe Acrobat Professional and Adobe Reader (v. 7.0.9). The two vulnerabilities exist in the Adobe Javascript API and may allow users' systems to be exploited by remote attackers as follows:

--  A memory corruption issue can be exploited, allowing a remote attacker
    to execute arbitrary code on the affected system;
--  A privilege-escalation issue allows an attacker to bypass security
    measures to remotely access restricted functions.

"Users can protect themselves from possible attack vectors by applying all necessary patches for installed software on their systems, including operating systems, browsers and other applications," said Derek Manky, security researcher for Fortinet.

Adobe Acrobat Professional and Adobe Reader users should upgrade to the latest versions of the software provided by Adobe at the following link: http://www.adobe.com/support/security/bulletins/apsb08-13.html .

The FortiGuard Global Security Research Team actively works with software vendors around the world to identify and resolve vulnerabilities, which helps to ensure adequate end-user protection.

For ongoing threat research, bookmark the FortiGuard Center ( http://www.fortiguardcenter.com/ ) or add it to your RSS feed by going to http://www.fortinet.com/FortiGuardCenter/rss/index.html . To learn more about FortiGuard Subscription Services, visit http://www.fortinet.com/products/fortiguard.html .

About Fortinet ( www.fortinet.com )

Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection -- including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in seven programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California.

Copyright © 2008 Fortinet, Inc. All rights reserved. Fortinet is a registered trademark of Fortinet, Inc. FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiCare, FortiManager, FortiWiFi, FortiGuard, FortiClient, FortiReporter and other names are trademarks of Fortinet, Inc. in the United States and/or other countries. All other trademarks referred to herein are the property of their respective owners.

Media Contact: Kim Nguyen Fortinet, Inc. 1 408 486 5458 knguyen@fortinet.com