Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript method."

This update of acroread fixes an unknown error in a JavaScript method that can lead to remote code execution. (CVE-2008-2641)

The version of Adobe Acrobat installed on the remote Windows host contains a flaw in the 'Collab.collectEmailInfo()' function that may allow a remote attacker to crash the application or to take control of the affected system. 

To exploit this flaw, an attacker would need to trick a user on the affected system into opening a specially crafted PDF file using the affected application.

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Adobe Acrobat Reader allows users to view and print documents in Portable Document Format (PDF).

An input validation flaw was discovered in a JavaScript engine used by Acrobat Reader. A malicious PDF file could cause Acrobat Reader to crash or, potentially, execute arbitrary code as the user running Acrobat Reader. (CVE-2008-2641)

An insecure temporary file usage issue was discovered in the Acrobat Reader 'acroread' startup script. A local attacker could potentially overwrite arbitrary files that were writable by the user running Acrobat Reader, if the victim ran 'acroread' with certain command line arguments. (CVE-2008-0883)

All acroread users are advised to upgrade to these updated packages, that contain Acrobat Reader version 8.1.2 Security Update 1, and are not vulnerable to these issues.

The remote host is affected by the vulnerability described in GLSA-200808-10 (Adobe Reader: User-assisted execution of arbitrary code)

    The Johns Hopkins University Applied Physics Laboratory reported that     input to an unspecified JavaScript method is not properly validated.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF     document, possibly resulting in the remote execution of arbitrary code     with the privileges of the user.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Reader installed on the remote Windows host contains a flaw in the function Collab.collectEmailInfo() that could allow a remote attacker to crash the application and/or to take control of the affected system.

To exploit this flaw, an attacker would need to trick a user on the affected system into opening a specially crafted PDF file.

ID	Name	Product	Family	Severity
41227	SuSE9 Security Update : Acrobat Reader (YOU Patch Number 12211)	Nessus	SuSE Local Security Checks	critical
40801	Adobe Acrobat < 7.1.0 / 8.1.2 Unspecified JavaScript Method Handling Arbitrary Code Execution	Nessus	Windows	critical
40724	RHEL 3 / 4 / 5 : acroread (RHSA-2008:0641)	Nessus	Red Hat Local Security Checks	critical
39904	openSUSE Security Update : acroread (acroread-115)	Nessus	SuSE Local Security Checks	critical
33858	GLSA-200808-10 : Adobe Reader: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
33573	openSUSE 10 Security Update : acroread (acroread-5467)	Nessus	SuSE Local Security Checks	critical
33572	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5466)	Nessus	SuSE Local Security Checks	critical
33256	Adobe Reader < 7.1.0 / 8.1.2 SU1 Unspecified JavaScript Method Handling Arbitrary Code Execution	Nessus	Windows	high

Detections

Analytics

CVE-2008-2641

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

high