Red Hat Security AdvisoryRHSA-2008:0974
acroread security update
Released 2008-11-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras acroread-8.1.3-1.i386, acroread-plugin-8.1.3-1.i386
- Red Hat Desktop version 4 Extras acroread-8.1.3-1.el4.i386, acroread-plugin-8.1.3-1.el4.i386
- Red Hat Enterprise Linux AS version 3 Extras acroread-8.1.3-1.i386, acroread-plugin-8.1.3-1.i386
- Red Hat Enterprise Linux AS version 4 Extras acroread-8.1.3-1.el4.i386, acroread-plugin-8.1.3-1.el4.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-8.1.3-1.el5.i386, acroread-plugin-8.1.3-1.el5.i386
- Red Hat Enterprise Linux ES version 3 Extras acroread-8.1.3-1.i386, acroread-plugin-8.1.3-1.i386
- Red Hat Enterprise Linux ES version 4 Extras acroread-8.1.3-1.el4.i386, acroread-plugin-8.1.3-1.el4.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-8.1.3-1.el5.i386, acroread-plugin-8.1.3-1.el5.i386
- Red Hat Enterprise Linux WS version 3 Extras acroread-8.1.3-1.i386, acroread-plugin-8.1.3-1.i386
- Red Hat Enterprise Linux WS version 4 Extras acroread-8.1.3-1.el4.i386, acroread-plugin-8.1.3-1.el4.i386
Fixes 8 records
Priority CRITICAL 97KEV
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab o…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.96632 · Published 2009-03-19 · Fixed CWE-121
Priority CRITICAL 93KEV
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argum…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.99793 · Published 2008-11-04 · Fixed CWE-787
Priority MEDIUM 58
Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation iss…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.18975 · Published 2008-11-05 · Fixed CWE-20
Priority MEDIUM 57
Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corru…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.17262 · Published 2008-11-05 · Fixed CWE-399
Priority MEDIUM 56
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an in…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.29149 · Published 2008-11-05 · Fixed CWE-264
Priority MEDIUM 53
The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, trig…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11378 · Published 2008-11-05 · Fixed CWE-20
Priority MEDIUM 53
Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.1102 · Published 2008-11-05 · Fixed CWE-20
Priority MEDIUM 52
Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.52617 · Published 2008-06-04 · Fixed
THREATIST.IORead the docs