New Zero Day Adobe Acrobat Reader Vulnerability Analysis – Part 1

This report analyzes an active Adobe Reader zero-day (CVE-2009-4324) delivered via a malicious, obfuscated PDF that contains JavaScript heap-spray exploit code targeting a vulnerable util.printd() call; the author documents using pdf-parser.py and Malzilla to extract and deobfuscate the payload and recommends disabling Acrobat JavaScript until a vendor patch is available.