Red Hat Security Advisory

RHSA-2011:0301

acroread security update

Released 2011-02-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras acroread-9.4.2-1.el4.i386, acroread-plugin-9.4.2-1.el4.i386
Red Hat Enterprise Linux AS version 4 Extras acroread-9.4.2-1.el4.i386, acroread-plugin-9.4.2-1.el4.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.4.2-1.el5.i386, acroread-plugin-9.4.2-1.el5.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 6) acroread-9.4.2-3.el6_0, acroread-plugin-9.4.2-3.el6_0
Red Hat Enterprise Linux ES version 4 Extras acroread-9.4.2-1.el4.i386, acroread-plugin-9.4.2-1.el4.i386
Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.4.2-1.el5.i386, acroread-plugin-9.4.2-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 6) acroread-9.4.2-3.el6_0, acroread-plugin-9.4.2-3.el6_0
Red Hat Enterprise Linux WS version 4 Extras acroread-9.4.2-1.el4.i386, acroread-plugin-9.4.2-1.el4.i386
Red Hat Enterprise Linux Workstation Supplementary (v. 6) acroread-9.4.2-3.el6_0, acroread-plugin-9.4.2-3.el6_0

Fixes 23 records

TI-2011-00518 CVE-2011-0593 · GHSA-phmp-vmqj-g6v8

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

HIGH 71

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer ov…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.4954 Published 2011-02-10 Fixed CWE-20

TI-2011-00517 CVE-2011-0592 · GHSA-g2g7-mp7p-qwgx

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

HIGH 70

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.47599 Published 2011-02-10 Fixed CWE-20

TI-2011-00516 CVE-2011-0591 · GHSA-vmqj-vh6g-cjq3

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

HIGH 70

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.47599 Published 2011-02-10 Fixed CWE-20

TI-2011-00524 CVE-2011-0600 · GHSA-39c8-3fh7-57wr

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and…

HIGH 68

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.40134 Published 2011-02-10 Fixed CWE-20

TI-2011-00493 CVE-2011-0567 · GHSA-qvcw-45h8-6h3w

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x…

HIGH 68

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.40268 Published 2011-02-10 Fixed CWE-119

TI-2011-00526 CVE-2011-0603 · GHSA-94hh-vfrm-jc8h

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 52

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08899 Published 2011-02-10 Fixed CWE-119

TI-2011-00523 CVE-2011-0599 · GHSA-q4vg-98mm-69wh

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1…

MEDIUM 52

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09305 Published 2011-02-10 Fixed CWE-20

TI-2011-00522 CVE-2011-0598 · GHSA-q8vr-3rj5-9h8v

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before…

MEDIUM 52

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a differe…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09839 Published 2011-02-10 Fixed CWE-189

TI-2011-00520 CVE-2011-0595 · GHSA-cj48-gr7g-jvm7

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 52

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0992 Published 2011-02-10 Fixed CWE-20

TI-2011-00492 CVE-2011-0566 · GHSA-3c6p-4f52-2c76

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 51

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07913 Published 2011-02-10 Fixed CWE-119

TI-2011-00529 CVE-2011-0606 · GHSA-7c5f-8pwv-5983

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1…

MEDIUM 50

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0689 Published 2011-02-10 Fixed CWE-119

TI-2011-00525 CVE-2011-0602 · GHSA-fjgw-mh3v-fgr9

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 50

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07221 Published 2011-02-10 Fixed CWE-20

TI-2011-00521 CVE-2011-0596 · GHSA-525f-cx6r-p4wx

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1…

MEDIUM 50

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with cra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07159 Published 2011-02-10 Fixed CWE-20

TI-2011-00519 CVE-2011-0594 · GHSA-3997-cwm3-9wpp

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 50

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07221 Published 2011-02-10 Fixed CWE-20

TI-2011-00515 CVE-2011-0590 · GHSA-fhxv-c3fv-fh8h

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 49

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CV…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06417 Published 2011-02-10 Fixed CWE-20

TI-2011-00511 CVE-2011-0586 · GHSA-29c8-3p4j-qm8x

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 49

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown ve…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06198 Published 2011-02-10 Fixed CWE-20

TI-2011-00510 CVE-2011-0585 · GHSA-m762-q9c2-gwpj

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before…

MEDIUM 49

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0605 Published 2011-02-10 Fixed

TI-2011-00491 CVE-2011-0565 · GHSA-x2w7-p2h8-pcq6

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before…

MEDIUM 49

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05687 Published 2011-02-10 Fixed

TI-2011-00514 CVE-2011-0589 · GHSA-jjp3-m764-2w7x

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 48

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05005 Published 2011-02-10 Fixed CWE-119

TI-2011-00489 CVE-2011-0563 · GHSA-9rx7-vx78-rj38

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04328 Published 2011-02-10 Fixed CWE-119

TI-2011-00488 CVE-2011-0562 · GHSA-pmv9-g95v-j898

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x…

LOW 32

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working di…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00673 Published 2011-02-10 Fixed

TI-2011-00527 CVE-2011-0604 · GHSA-3w5h-vwcq-cggw

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1…

LOW 26

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via u…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03155 Published 2011-02-10 Fixed CWE-79

TI-2011-00512 CVE-2011-0587 · GHSA-q7vh-mgj9-p32p

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1…

LOW 26

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03155 Published 2011-02-10 Fixed CWE-79