Red Hat Security Advisory

RHSA-2010:0503

acroread security update

Released 2010-06-30 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras acroread-9.3.3-2.el4.i386, acroread-plugin-9.3.3-2.el4.i386
Red Hat Enterprise Linux AS version 4 Extras acroread-9.3.3-2.el4.i386, acroread-plugin-9.3.3-2.el4.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.3.3-1.el5.i386, acroread-plugin-9.3.3-1.el5.i386
Red Hat Enterprise Linux ES version 4 Extras acroread-9.3.3-2.el4.i386, acroread-plugin-9.3.3-2.el4.i386
Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.3.3-1.el5.i386, acroread-plugin-9.3.3-1.el5.i386
Red Hat Enterprise Linux WS version 4 Extras acroread-9.3.3-2.el4.i386, acroread-plugin-9.3.3-2.el4.i386

Fixes 17 records

TI-2010-01252 CVE-2010-1297 · GHSA-cv7g-qpjc-66p7

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before…

CRITICAL 93KEV

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82531 Published 2010-06-08 Fixed CWE-787

TI-2010-01195 CVE-2010-1240 · GHSA-r9c9-qvgh-48mx

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

HIGH 78

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to tri…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.73617 Published 2010-04-05 Fixed CWE-264

TI-2010-02113 CVE-2010-2204 · GHSA-whxp-44j4-m79c

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before…

MEDIUM 55

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13008 Published 2010-06-30 Fixed

TI-2010-02110 CVE-2010-2201 · GHSA-qm3q-8q36-x3vh

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 55

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14267 Published 2010-06-30 Fixed CWE-399

TI-2010-02080 CVE-2010-2168 · GHSA-2qrp-v3mf-g36h

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 55

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction (0x44) operator and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14267 Published 2010-06-30 Fixed CWE-399

TI-2010-02115 CVE-2010-2206 · GHSA-jf6r-2jh6-5f5q

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x…

MEDIUM 50

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06994 Published 2010-06-30 Fixed CWE-189

TI-2010-02121 CVE-2010-2212 · GHSA-fv9q-w2fc-m6jg

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on…

MEDIUM 47

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file conta…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04452 Published 2010-06-30 Fixed CWE-119

TI-2010-02119 CVE-2010-2210 · GHSA-jgwh-gf9q-8hjj

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 47

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0427 Published 2010-06-30 Fixed CWE-119

TI-2010-02117 CVE-2010-2208 · GHSA-2f8f-mr6r-cvh9

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 47

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04175 Published 2010-06-30 Fixed CWE-94

TI-2010-02114 CVE-2010-2205 · GHSA-5wjr-vj25-wfpw

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 47

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04302 Published 2010-06-30 Fixed CWE-94

TI-2010-01240 CVE-2010-1285 · GHSA-96r2-72m9-m58r

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X…

MEDIUM 47

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid poin…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04172 Published 2010-06-30 Fixed CWE-20

TI-2010-02120 CVE-2010-2211 · GHSA-4gj4-pg9r-v8v2