Adobe Reader and Acrobat 8.x before 8.3 9.x before 9.4.5 and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script which allows attackers to execute arbitrary code via a crafted document related to a \cross document script execution vulnerability.\