Red Hat Security Advisory

RHSA-2010:0636

acroread security update

Released 2010-08-20 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras acroread-9.3.4-1.el4.i386, acroread-plugin-9.3.4-1.el4.i386
Red Hat Enterprise Linux AS version 4 Extras acroread-9.3.4-1.el4.i386, acroread-plugin-9.3.4-1.el4.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.3.4-1.el5.i386, acroread-plugin-9.3.4-1.el5.i386
Red Hat Enterprise Linux ES version 4 Extras acroread-9.3.4-1.el4.i386, acroread-plugin-9.3.4-1.el4.i386
Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.3.4-1.el5.i386, acroread-plugin-9.3.4-1.el5.i386
Red Hat Enterprise Linux WS version 4 Extras acroread-9.3.4-1.el4.i386, acroread-plugin-9.3.4-1.el4.i386

Fixes 6 records

TI-2010-02738 CVE-2010-2862 · GHSA-ghwm-gwr7-m4m2

Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3…

MEDIUM 57

Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16305 Published 2010-08-05 Fixed CWE-189

TI-2010-02125 CVE-2010-2216 · GHSA-248p-gq7w-24rp

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-02123 CVE-2010-2214 · GHSA-fhc9-8cx6-h467

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-02122 CVE-2010-2213 · GHSA-89mr-5p7g-mp6c

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-00202 CVE-2010-0209 · GHSA-cc4q-35f8-jwmg

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-02124 CVE-2010-2215 · GHSA-5rh8-5qgm-3qcp

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

LOW 27

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03849 Published 2010-08-11 Fixed