The vulnerability was found in the JBIGeDecode filter, a feature specifically intended for compressing monochrome images, and allowed attackers to use the JBIG2Decode specifications hide their encoded malicious payload in order to get past antivirus scanners without being detected. The dangerous encoded content is targets a flaw identified as , which allowed attackers to cause Adobe Reader and Acrobat to crash--and possibly gain complete control of your system.

According to Jiri Sejtko, Avast's senior virus analyst, "the JBIG2 algorithm works here because any data--text or binary--can be declared as a monochrome two-dimensional image." Sejtko also says that they hadn't expected anyone would use a pure image algorithm for something that's not an image.

Avast patched the vulnerability in current versions of Adobe Reader, however, older versions of the program are still affected. As always, you should keep Adobe up to date and on automatic update if possible. For more information on this vulnerability visit the .

[]