Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284
http://www.vupen.com/english/advisories/2009/2898
http://www.us-cert.gov/cas/techalerts/TA09-286B.html
http://www.securityfocus.com/bid/36638
http://www.adobe.com/support/security/bulletins/apsb09-15.html