Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0570.

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.2 to address the issues.

(CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)

The remote host is affected by the vulnerability described in GLSA-201201-19 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Reader. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file using Adobe Reader, possibly resulting in the remote execution of       arbitrary code, a Denial of Service, or other impact.
  Workaround :

    There is no known workaround at this time.

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues (CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586 / CVE-2011-0587 / CVE-2011-0588 / CVE-2011-0589 / CVE-2011-0590 / CVE-2011-0591 / CVE-2011-0592 / CVE-2011-0593 / CVE-2011-0594 / CVE-2011-0595 / CVE-2011-0596 / CVE-2011-0598 / CVE-2011-0599 / CVE-2011-0600 / CVE-2011-0602 / CVE-2011-0603 / CVE-2011-0604 / CVE-2011-0606 / CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 / CVE-2011-0573 / CVE-2011-0574 / CVE-2011-0575 / CVE-2011-0577 / CVE-2011-0578 / CVE-2011-0607 / CVE-2011-0608.)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues (CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586 / CVE-2011-0587 / CVE-2011-0588 / CVE-2011-0589 / CVE-2011-0590 / CVE-2011-0591 / CVE-2011-0592 / CVE-2011-0593 / CVE-2011-0594 / CVE-2011-0595 / CVE-2011-0596 / CVE-2011-0598 / CVE-2011-0599 / CVE-2011-0600 / CVE-2011-0602 / CVE-2011-0603 / CVE-2011-0604 / CVE-2011-0606 / CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 / CVE-2011-0573 / CVE-2011-0574 / CVE-2011-0575 / CVE-2011-0577 / CVE-2011-0578 / CVE-2011-0607 / CVE-2011-0608)

The version of Adobe Reader installed on the remote host is earlier than 10.0.1 / 9.4.2 / 8.2.6.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple input validation vulnerability exist that could     lead to code execution. (CVE-2010-4091, CVE-2011-0586,     CVE-2011-0587, CVE-2011-0604)     
  - Multiple library loading vulnerabilities exist that     could lead to code execution. (CVE-2011-0562,     CVE-2011-0570, CVE-2011-0575, CVE-2011-0588)     
  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-0563,     CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,     CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,     CVE-2011-0574, CVE-2011-0578, CVE-2011-0589,     CVE-2011-0606, CVE-2011-0607, CVE-2011-0608)     
  - A Windows-only file permissions issue exists that could     lead to privilege escalation. (CVE-2011-0564)     
  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0565)     
  - Multiple image-parsing memory corruption vulnerabilities     exist that could lead to code execution. (CVE-2011-0566,     CVE-2011-0567, CVE-2011-0596, CVE-2011-0598,     CVE-2011-0599, CVE-2011-0602, CVE-2011-0603)

  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0585)

  - Multiple 3D file parsing input validation     vulnerabilities exist that could lead to code execution.
    (CVE-2011-0590, CVE-2011-0591, CVE-2011-0592,      CVE-2011-0593, CVE-2011-0595, CVE-2011-0600)   
  - Multiple font parsing input validation vulnerabilities     exist that could lead to code execution. (CVE-2011-0594,     CVE-2011-0577)

  - An integer overflow vulnerability exists that could lead     to code execution. (CVE-2011-0558)

The version of Adobe Acrobat installed on the remote host is earlier than 10.0.1 / 9.4.2 / 8.2.5.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple input validation vulnerability exist that could     lead to code execution. (CVE-2010-4091, CVE-2011-0586,     CVE-2011-0587, CVE-2011-0604)     
  - Multiple library loading vulnerabilities exist that     could lead to code execution. (CVE-2011-0562,     CVE-2011-0570, CVE-2011-0575, CVE-2011-0588)     
  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-0563,     CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,     CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,     CVE-2011-0574, CVE-2011-0578, CVE-2011-0589,     CVE-2011-0606, CVE-2011-0607, CVE-2011-0608)     
  - A Windows-only file permissions issue exists that could     lead to privilege escalation. (CVE-2011-0564)     
  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0565)     
  - Multiple image-parsing memory corruption vulnerabilities     exist that could lead to code execution. (CVE-2011-0566,     CVE-2011-0567, CVE-2011-0596, CVE-2011-0598,     CVE-2011-0599, CVE-2011-0602, CVE-2011-0603)

  - An unspecified vulnerability exists that could cause the     application to crash or potentially lead to code     execution. (CVE-2011-0585)

  - Multiple 3D file parsing input validation     vulnerabilities exist that could lead to code execution.
    (CVE-2011-0590, CVE-2011-0591, CVE-2011-0592,      CVE-2011-0593, CVE-2011-0595, CVE-2011-0600)   
  - Multiple font parsing input validation vulnerabilities     exist that could lead to code execution. (CVE-2011-0594,     CVE-2011-0577)

  - An integer overflow vulnerability exists that could lead     to code execution. (CVE-2011-0558)

ID	Name	Product	Family	Severity
75421	openSUSE Security Update : acroread (openSUSE-SU-2011:0156-1)	Nessus	SuSE Local Security Checks	high
57745	GLSA-201201-19 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
53693	openSUSE Security Update : acroread (openSUSE-SU-2011:0156-1)	Nessus	SuSE Local Security Checks	high
52568	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7359)	Nessus	SuSE Local Security Checks	high
52567	SuSE 10 Security Update : acroread (ZYPP Patch Number 7358)	Nessus	SuSE Local Security Checks	high
52566	SuSE 11.1 Security Update : acroread_ja (SAT Patch Number 4058)	Nessus	SuSE Local Security Checks	high
52565	SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)	Nessus	SuSE Local Security Checks	high
51925	Adobe Reader < 10.0.1 / 9.4.2 / 8.2.6 Multiple Vulnerabilities (APSB11-03)	Nessus	Windows	high
51924	Adobe Acrobat < 10.0.1 / 9.4.2 / 8.2.5 Multiple Vulnerabilities (APSB11-03)	Nessus	Windows	high

Detections

Analytics

CVE-2011-0588

high

Tenable Plugins

high

critical

high

high

high

high

high

high

high