Red Hat Security AdvisoryRHSA-2009:1499
acroread security update
Released 2009-10-14 · Red Hat rating Critical · View on Red Hat →
Fixes 18 records
Priority CRITICAL 97KEV
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as e…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.86531 · Published 2009-10-13 · Fixed CWE-122
Priority HIGH 77
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.6857 · Published 2009-10-19 · Fixed CWE-189
Priority MEDIUM 58
Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.18445 · Published 2009-10-19 · Fixed CWE-119
Priority MEDIUM 54
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.12129 · Published 2009-10-19 · Fixed CWE-399
Priority MEDIUM 53
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10391 · Published 2009-10-19 · Fixed CWE-20
Priority MEDIUM 53
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10391 · Published 2009-10-19 · Fixed CWE-20
Priority MEDIUM 51
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08303 · Published 2009-10-19 · Fixed CWE-119
Priority MEDIUM 51
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08303 · Published 2009-10-19 · Fixed CWE-119
Priority MEDIUM 51
Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08383 · Published 2009-10-19 · Fixed CWE-189
Priority MEDIUM 50
The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified Java…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06672 · Published 2009-10-19 · Fixed CWE-20
Priority MEDIUM 50
Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07533 · Published 2009-10-19 · Fixed
Priority MEDIUM 49
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vul…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05597 · Published 2009-10-19 · Fixed CWE-399
Priority MEDIUM 49
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vul…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05597 · Published 2009-10-19 · Fixed CWE-399
Priority MEDIUM 49
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05684 · Published 2009-10-19 · Fixed CWE-20
Priority MEDIUM 43
Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.21984 · Published 2009-09-25 · Fixed CWE-119
Priority LOW 32
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.06088 · Published 2009-10-19 · Fixed
Priority LOW 26
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03503 · Published 2009-10-19 · Fixed CWE-20
Priority LOW 26
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted documen…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03206 · Published 2009-10-19 · Fixed