SuSE 10 Security Update : acroread (ZYPP Patch Number 7087)

High Nessus Plugin ID 51701


The remote SuSE 10 host is missing a security-related patch.


Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as :

- CVE-2010-1297

- CVE-2010-1240

- CVE-2010-1285

- CVE-2010-1295

- CVE-2010-2168

- CVE-2010-2201

- CVE-2010-2202

- CVE-2010-2203

- CVE-2010-2204

- CVE-2010-2205

- CVE-2010-2206

- CVE-2010-2207

- CVE-2010-2208

- CVE-2010-2209

- CVE-2010-2210

- CVE-2010-2211

- CVE-2010-2212


Apply ZYPP patch number 7087.

See Also

Plugin Details

Severity: High

ID: 51701

File Name: suse_acroread-7087.nasl

Version: $Revision: 1.29 $

Type: local

Agent: unix

Published: 2011/01/27

Modified: 2014/10/24

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:suse:suse_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/07/02

Exploitable With


Core Impact

Metasploit (Adobe Flash Player "newfunction" Invalid Pointer Use)

ExploitHub (EH-11-164)

Reference Information

CVE: CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-1297, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, CVE-2010-2212