Adobe s security response team is scrambling to deal with the release of exploit code for what appears to be a critical zero-day flaw in the Adobe Illustrator CS4 software product. The vulnerability is caused due to an error in the parsing of Encapsulated Postscript Files (.eps) and can be exploited to corrupt memory when a user opens a specially crafted.eps file. Successful exploitation allows execution of arbitrary code. The flaw is confirmed in version CS3 13.0.0 and CS4 14.0.
Source: https://threatpost.com/exploit-released-adobe-illustrator-zero-day-flaw-120309/73203/

