Red Hat Security AdvisoryRHSA-2009:0376
acroread security update
Released 2009-03-25 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras acroread-8.1.4-1.i386, acroread-plugin-8.1.4-1.i386
- Red Hat Desktop version 4 Extras acroread-8.1.4-1.el4.i386, acroread-plugin-8.1.4-1.el4.i386
- Red Hat Enterprise Linux AS version 3 Extras acroread-8.1.4-1.i386, acroread-plugin-8.1.4-1.i386
- Red Hat Enterprise Linux AS version 4 Extras acroread-8.1.4-1.el4.i386, acroread-plugin-8.1.4-1.el4.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-8.1.4-1.el5.i386, acroread-plugin-8.1.4-1.el5.i386
- Red Hat Enterprise Linux ES version 3 Extras acroread-8.1.4-1.i386, acroread-plugin-8.1.4-1.i386
- Red Hat Enterprise Linux ES version 4 Extras acroread-8.1.4-1.el4.i386, acroread-plugin-8.1.4-1.el4.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-8.1.4-1.el5.i386, acroread-plugin-8.1.4-1.el5.i386
- Red Hat Enterprise Linux WS version 3 Extras acroread-8.1.4-1.i386, acroread-plugin-8.1.4-1.i386
- Red Hat Enterprise Linux WS version 4 Extras acroread-8.1.4-1.el4.i386, acroread-plugin-8.1.4-1.el4.i386
Fixes 5 records
Priority HIGH 76
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedd…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.87832 · Published 2009-02-20 · Fixed CWE-119
Priority MEDIUM 55
Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size i…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10235 · Published 2009-03-25 · Fixed CWE-119
Priority MEDIUM 53
Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and "input validation,…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11026 · Published 2009-03-25 · Fixed CWE-20
Priority MEDIUM 52
Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a dif…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09595 · Published 2009-03-25 · Fixed CWE-119
Priority MEDIUM 49
Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06204 · Published 2009-03-25 · Fixed CWE-20
THREATIST.IORead the docs