Red Hat Security Advisory

RHSA-2012:0469

acroread security update

Released 2012-04-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.5.1-1.el5.i386, acroread-plugin-9.5.1-1.el5.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 6) acroread-9.5.1-1.el6_2, acroread-plugin-9.5.1-1.el6_2
Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.5.1-1.el5.i386, acroread-plugin-9.5.1-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 6) acroread-9.5.1-1.el6_2, acroread-plugin-9.5.1-1.el6_2
Red Hat Enterprise Linux Workstation Supplementary (v. 6) acroread-9.5.1-1.el6_2, acroread-plugin-9.5.1-1.el6_2

Fixes 7 records

TI-2011-03835 CVE-2011-4373 · GHSA-xv37-xpc4-25wq

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X…

HIGH 66

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnera…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30253 Published 2012-01-10 Fixed CWE-787

TI-2012-00713 CVE-2012-0774 · GHSA-633j-5998-rq95

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3…

MEDIUM 59

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15485 Published 2012-04-10 Fixed CWE-189

TI-2011-03834 CVE-2011-4372 · GHSA-j8vc-rf9f-c27g

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X…

MEDIUM 56

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12584 Published 2012-01-10 Fixed CWE-787

TI-2012-00714 CVE-2012-0775 · GHSA-26v6-mp3h-qg6h

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x…

MEDIUM 54

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08977 Published 2012-04-10 Fixed CWE-119

TI-2011-03833 CVE-2011-4371 · GHSA-prc9-4jhw-9h6r

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X…

MEDIUM 42

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06211 Published 2012-01-10 Fixed CWE-787

TI-2011-03832 CVE-2011-4370 · GHSA-7cc2-5wx7-mm67

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X…

MEDIUM 42

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06211 Published 2012-01-10 Fixed CWE-787

TI-2012-00716 CVE-2012-0777 · GHSA-jxrq-6cjh-p9vf

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on…

MEDIUM 40

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07073 Published 2012-04-10 Fixed CWE-119