Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code. (CVE-2010-0190 / CVE-2010-0191 / CVE-2010-0192 / CVE-2010-0193 / CVE-2010-0194 / CVE-2010-0195 / CVE-2010-0196 / CVE-2010-0197 / CVE-2010-0198 / CVE-2010-0199 / CVE-2010-0201 / CVE-2010-0202 / CVE-2010-0203 / CVE-2010-0204 / CVE-2010-1241)

The remote host is affected by the vulnerability described in GLSA-201009-05 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities were discovered in Adobe Reader. For further     information please consult the CVE entries and the Adobe Security     Bulletins referenced below.
  Impact :

    A remote attacker might entice a user to open a specially crafted PDF     file, possibly resulting in the execution of arbitrary code with the     privileges of the user running the application, or bypass intended     sandbox restrictions, make cross-domain requests, inject arbitrary web     script or HTML, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

This update fixes several vulnerabilities in Adobe Reader. These vulnerabilities are summarized on the Adobe Security Advisory APSB10-09 page listed in the References section. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened.
(CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202, CVE-2010-0203, CVE-2010-0204, CVE-2010-1241)

All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.3.2, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code (CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193 CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197 CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202 CVE-2010-0203, CVE-2010-0204, CVE-2010-1241).

The version of Adobe Reader installed on the remote host is earlier than 9.3.2 / 8.2.2.  Such versions are reportedly affected by multiple vulnerabilities :
  - A cross-site scripting issue could lead to code     execution. (CVE-2010-0190)

  - A prefix protocol handler vulnerability could lead to     code execution. (CVE-2010-0191)

  - A denial of service vulnerability could potentially lead     to code execution. (CVE-2010-0192)

  - A denial of service vulnerability could potentially lead     to code execution. (CVE-2010-0193)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0194)

  - A font handling vulnerability could lead to code     execution. (CVE-2010-0195)

  - A denial of service vulnerability could potentially lead     lead to code execution. (CVE-2010-0196)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0197)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0198)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0199)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0201)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0202)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0203)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0204)

  - A heap-based buffer overflow vulnerability could lead     to code execution. (CVE-2010-1241)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3.2 / 8.2.2.  Such versions are reportedly affected by multiple vulnerabilities :
  - A cross-site scripting issue could lead to code     execution. (CVE-2010-0190)

  - A prefix protocol handler vulnerability could lead to     code execution. (CVE-2010-0191)

  - A denial of service vulnerability could potentially lead     to code execution. (CVE-2010-0192)

  - A denial of service vulnerability could potentially lead     to code execution. (CVE-2010-0193)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0194)

  - A font handling vulnerability could lead to code     execution. (CVE-2010-0195)

  - A denial of service vulnerability could potentially lead     to code execution. (CVE-2010-0196)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0197)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0198)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0199)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0201)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0202)

  - A buffer overflow vulnerability could lead to code     execution. (CVE-2010-0203)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2010-0204)

  - A heap-based buffer overflow vulnerability could lead     to code execution. (CVE-2010-1241)

ID	Name	Product	Family	Severity
51712	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6995)	Nessus	SuSE Local Security Checks	high
51700	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6994)	Nessus	SuSE Local Security Checks	high
51699	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6993)	Nessus	SuSE Local Security Checks	high
50885	SuSE 11 Security Update : acroread_ja (SAT Patch Number 2322)	Nessus	SuSE Local Security Checks	high
50881	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2320)	Nessus	SuSE Local Security Checks	high
49126	GLSA-201009-05 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
46299	RHEL 4 / 5 : acroread (RHSA-2010:0349)	Nessus	Red Hat Local Security Checks	high
45600	openSUSE Security Update : acroread (openSUSE-SU-2010:0137-1)	Nessus	SuSE Local Security Checks	high
45599	openSUSE Security Update : acroread (openSUSE-SU-2010:0137-1)	Nessus	SuSE Local Security Checks	high
45598	openSUSE Security Update : acroread (openSUSE-SU-2010:0137-1)	Nessus	SuSE Local Security Checks	high
45505	Adobe Reader < 9.3.2 / 8.2.2 Multiple Vulnerabilities (APSB10-09)	Nessus	Windows	high
45504	Adobe Acrobat < 9.3.2 / 8.2.2 Multiple Vulnerabilities (APSB10-09)	Nessus	Windows	high

Detections

Analytics

CVE-2010-0191

critical

Tenable Plugins

high

high

high

high

high

critical

high

high

high

high

high

high