Red Hat Security AdvisoryRHSA-2008:0144
acroread security update
Released 2008-02-22 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras acroread-8.1.2-1.el3.6.i386, acroread-plugin-8.1.2-1.el3.6.i386
- Red Hat Desktop version 4 Extras acroread-8.1.2-1.el4.2.i386, acroread-plugin-8.1.2-1.el4.2.i386
- Red Hat Enterprise Linux AS version 3 Extras acroread-8.1.2-1.el3.6.i386, acroread-plugin-8.1.2-1.el3.6.i386
- Red Hat Enterprise Linux AS version 4 Extras acroread-8.1.2-1.el4.2.i386, acroread-plugin-8.1.2-1.el4.2.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-8.1.2-1.el5.3.i386, acroread-plugin-8.1.2-1.el5.3.i386
- Red Hat Enterprise Linux ES version 3 Extras acroread-8.1.2-1.el3.6.i386, acroread-plugin-8.1.2-1.el3.6.i386
- Red Hat Enterprise Linux ES version 4 Extras acroread-8.1.2-1.el4.2.i386, acroread-plugin-8.1.2-1.el4.2.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-8.1.2-1.el5.3.i386, acroread-plugin-8.1.2-1.el5.3.i386
- Red Hat Enterprise Linux WS version 3 Extras acroread-8.1.2-1.el3.6.i386, acroread-plugin-8.1.2-1.el3.6.i386
- Red Hat Enterprise Linux WS version 4 Extras acroread-8.1.2-1.el4.2.i386, acroread-plugin-8.1.2-1.el4.2.i386
Fixes 7 records
Priority CRITICAL 97KEV
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.37871 · Published 2008-02-07 · Fixed CWE-200
Priority CRITICAL 93KEV
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.87423 · Published 2008-02-12 · Fixed CWE-120
Priority MEDIUM 56
Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.14638 · Published 2008-02-12 · Fixed CWE-189
Priority MEDIUM 55
Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13273 · Published 2008-02-12 · Fixed CWE-94
Priority MEDIUM 53
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.56775 · Published 2007-01-03 · Fixed CWE-352
Priority LOW 30
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06914 · Published 2008-02-11 · Fixed CWE-399
Priority LOW 30
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.01368 · Published 2008-02-12 · Fixed CWE-94
THREATIST.IORead the docs