Red Hat Security AdvisoryRHSA-2007:0017
Adobe Acrobat Reader security update
Released 2007-01-11 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras acroread-7.0.9-1.2.0.EL4.i386, acroread-plugin-7.0.9-1.2.0.EL4.i386
- Red Hat Enterprise Linux AS version 4 Extras acroread-7.0.9-1.2.0.EL4.i386, acroread-plugin-7.0.9-1.2.0.EL4.i386
- Red Hat Enterprise Linux ES version 4 Extras acroread-7.0.9-1.2.0.EL4.i386, acroread-plugin-7.0.9-1.2.0.EL4.i386
- Red Hat Enterprise Linux WS version 4 Extras acroread-7.0.9-1.2.0.EL4.i386, acroread-plugin-7.0.9-1.2.0.EL4.i386
Fixes 3 records
Priority HIGH 66
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.5679 · Published 2007-01-03 · Fixed
Priority MEDIUM 52
Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0939 · Published 2007-01-10 · Fixed CWE-399
Priority MEDIUM 50
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla F…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.47343 · Published 2007-01-03 · Fixed CWE-79