Red Hat Security Advisory

RHSA-2010:0037

acroread security and bug fix update

Released 2010-01-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.3-1.el5.i386, acroread-plugin-9.3-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.3-1.el5.i386, acroread-plugin-9.3-1.el5.i386

Fixes 6 records

TI-2009-03750 CVE-2009-3953 · GHSA-q4f6-24ph-r6rm

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on…

CRITICAL 97KEV

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.83219 Published 2010-01-13 Fixed CWE-787

TI-2009-04087 CVE-2009-4324 · GHSA-rv25-qx26-27xv

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe…

CRITICAL 93KEV

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code v…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.8188 Published 2009-12-15 Fixed CWE-416

TI-2009-03752 CVE-2009-3955 · GHSA-wfg4-6mw6-5m2j

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X…

MEDIUM 59

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15809 Published 2010-01-13 Fixed CWE-399

TI-2009-03756 CVE-2009-3959 · GHSA-rh7h-fjp6-m8mh

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3…

MEDIUM 56

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11474 Published 2010-01-13 Fixed CWE-189

TI-2009-03751 CVE-2009-3954 · GHSA-gphr-x7qg-mp2c

The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on…

MEDIUM 54

The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0905 Published 2010-01-13 Fixed CWE-94

TI-2009-03753 CVE-2009-3956 · GHSA-27hw-76jw-48hx

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2…

MEDIUM 53

The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07732 Published 2010-01-13 Fixed CWE-16