Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues (CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586 / CVE-2011-0587 / CVE-2011-0588 / CVE-2011-0589 / CVE-2011-0590 / CVE-2011-0591 / CVE-2011-0592 / CVE-2011-0593 / CVE-2011-0594 / CVE-2011-0595 / CVE-2011-0596 / CVE-2011-0598 / CVE-2011-0599 / CVE-2011-0600 / CVE-2011-0602 / CVE-2011-0603 / CVE-2011-0604 / CVE-2011-0606 / CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 / CVE-2011-0573 / CVE-2011-0574 / CVE-2011-0575 / CVE-2011-0577 / CVE-2011-0578 / CVE-2011-0607 / CVE-2011-0608.)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues (CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586 / CVE-2011-0587 / CVE-2011-0588 / CVE-2011-0589 / CVE-2011-0590 / CVE-2011-0591 / CVE-2011-0592 / CVE-2011-0593 / CVE-2011-0594 / CVE-2011-0595 / CVE-2011-0596 / CVE-2011-0598 / CVE-2011-0599 / CVE-2011-0600 / CVE-2011-0602 / CVE-2011-0603 / CVE-2011-0604 / CVE-2011-0606 / CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 / CVE-2011-0573 / CVE-2011-0574 / CVE-2011-0575 / CVE-2011-0577 / CVE-2011-0578 / CVE-2011-0607 / CVE-2011-0608)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.2 to address the issues.

(CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)

The version of Adobe Reader installed on the remote host is earlier than 10.0.1 / 9.4.2 / 8.2.6.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple input validation vulnerability exist that could     lead to code execution. (CVE-2010-4091, CVE-2011-0586,     CVE-2011-0587, CVE-2011-0604)     
  - Multiple library loading vulnerabilities exist that     could lead to code execution. (CVE-2011-0562,     CVE-2011-0570, CVE-2011-0575, CVE-2011-0588)     
  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-0563,     CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,     CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,     CVE-2011-0574, CVE-2011-0578, CVE-2011-0589,     CVE-2011-0606, CVE-2011-0607, CVE-2011-0608)     
  - A Windows-only file permissions issue exists that could     lead to privilege escalation. (CVE-2011-0564)     
  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0565)     
  - Multiple image-parsing memory corruption vulnerabilities     exist that could lead to code execution. (CVE-2011-0566,     CVE-2011-0567, CVE-2011-0596, CVE-2011-0598,     CVE-2011-0599, CVE-2011-0602, CVE-2011-0603)

  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0585)

  - Multiple 3D file parsing input validation     vulnerabilities exist that could lead to code execution.
    (CVE-2011-0590, CVE-2011-0591, CVE-2011-0592,      CVE-2011-0593, CVE-2011-0595, CVE-2011-0600)   
  - Multiple font parsing input validation vulnerabilities     exist that could lead to code execution. (CVE-2011-0594,     CVE-2011-0577)

  - An integer overflow vulnerability exists that could lead     to code execution. (CVE-2011-0558)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

This update fixes multiple vulnerabilities in Adobe Reader. These vulnerabilities are detailed on the Adobe security page APSB11-03, listed in the References section.

A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0585, CVE-2011-0586, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0606)

Multiple security flaws were found in Adobe reader. A specially crafted PDF file could cause cross-site scripting (XSS) attacks against the user running Adobe Reader when opened. (CVE-2011-0587, CVE-2011-0604)

All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.4.2, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.

The version of Adobe Acrobat installed on the remote host is earlier than 10.0.1 / 9.4.2 / 8.2.5.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple input validation vulnerability exist that could     lead to code execution. (CVE-2010-4091, CVE-2011-0586,     CVE-2011-0587, CVE-2011-0604)     
  - Multiple library loading vulnerabilities exist that     could lead to code execution. (CVE-2011-0562,     CVE-2011-0570, CVE-2011-0575, CVE-2011-0588)     
  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-0563,     CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,     CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,     CVE-2011-0574, CVE-2011-0578, CVE-2011-0589,     CVE-2011-0606, CVE-2011-0607, CVE-2011-0608)     
  - A Windows-only file permissions issue exists that could     lead to privilege escalation. (CVE-2011-0564)     
  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0565)     
  - Multiple image-parsing memory corruption vulnerabilities     exist that could lead to code execution. (CVE-2011-0566,     CVE-2011-0567, CVE-2011-0596, CVE-2011-0598,     CVE-2011-0599, CVE-2011-0602, CVE-2011-0603)

  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0585)

  - Multiple 3D file parsing input validation     vulnerabilities exist that could lead to code execution.
    (CVE-2011-0590, CVE-2011-0591, CVE-2011-0592,      CVE-2011-0593, CVE-2011-0595, CVE-2011-0600)   
  - Multiple font parsing input validation vulnerabilities     exist that could lead to code execution. (CVE-2011-0594,     CVE-2011-0577)

  - An integer overflow vulnerability exists that could lead     to code execution. (CVE-2011-0558)

The remote host is affected by the vulnerability described in GLSA-201201-19 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Reader. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file using Adobe Reader, possibly resulting in the remote execution of       arbitrary code, a Denial of Service, or other impact.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
52568	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7359)	Nessus	SuSE Local Security Checks	3/7/2011	1/19/2021	high
52565	SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)	Nessus	SuSE Local Security Checks	3/7/2011	1/19/2021	high
52567	SuSE 10 Security Update : acroread (ZYPP Patch Number 7358)	Nessus	SuSE Local Security Checks	3/7/2011	1/19/2021	high
53693	openSUSE Security Update : acroread (openSUSE-SU-2011:0156-1)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	high
51925	Adobe Reader < 10.0.1 / 9.4.2 / 8.2.6 Multiple Vulnerabilities (APSB11-03)	Nessus	Windows	2/9/2011	11/15/2018	high
52566	SuSE 11.1 Security Update : acroread_ja (SAT Patch Number 4058)	Nessus	SuSE Local Security Checks	3/7/2011	1/19/2021	high
75421	openSUSE Security Update : acroread (openSUSE-SU-2011:0156-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	high
52161	RHEL 4 / 5 / 6 : acroread (RHSA-2011:0301)	Nessus	Red Hat Local Security Checks	2/24/2011	1/14/2021	high
51924	Adobe Acrobat < 10.0.1 / 9.4.2 / 8.2.5 Multiple Vulnerabilities (APSB11-03)	Nessus	Windows	2/9/2011	11/15/2018	high
57745	GLSA-201201-19 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/31/2012	6/8/2022	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

critical