Detections
Analytics
SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2639 / 2640)
high Nessus Plugin ID 50882
Language:
Synopsis
The remote SuSE 11 host is missing one or more security updates.Description
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as :- CVE-2010-1297
- CVE-2010-1240
- CVE-2010-1285
- CVE-2010-1295
- CVE-2010-2168
- CVE-2010-2201
- CVE-2010-2202
- CVE-2010-2203
- CVE-2010-2204
- CVE-2010-2205
- CVE-2010-2206
- CVE-2010-2207
- CVE-2010-2208
- CVE-2010-2209
- CVE-2010-2210
- CVE-2010-2211
- CVE-2010-2212
Solution
Apply SAT patch number 2639 / 2640 as appropriate.See Also
https://bugzilla.novell.com/show_bug.cgi?id=612064
http://support.novell.com/security/cve/CVE-2010-1240.html
http://support.novell.com/security/cve/CVE-2010-1285.html
http://support.novell.com/security/cve/CVE-2010-1295.html
http://support.novell.com/security/cve/CVE-2010-1297.html
http://support.novell.com/security/cve/CVE-2010-2168.html
http://support.novell.com/security/cve/CVE-2010-2201.html
http://support.novell.com/security/cve/CVE-2010-2202.html
http://support.novell.com/security/cve/CVE-2010-2203.html
http://support.novell.com/security/cve/CVE-2010-2204.html
http://support.novell.com/security/cve/CVE-2010-2205.html
http://support.novell.com/security/cve/CVE-2010-2206.html
http://support.novell.com/security/cve/CVE-2010-2207.html
http://support.novell.com/security/cve/CVE-2010-2208.html
http://support.novell.com/security/cve/CVE-2010-2209.html
http://support.novell.com/security/cve/CVE-2010-2210.html
Plugin Details
Severity: High
ID: 50882
File Name: suse_11_acroread-100702.nasl
Version: 1.35
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 12/2/2010
Updated: 6/8/2022
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.6
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:acroread, p-cpe:/a:novell:suse_linux:11:acroread-cmaps, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ja, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ko, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_cn, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_tw, cpe:/o:novell:suse_linux:11
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/2/2010
CISA Known Exploited Vulnerability Due Dates: 6/22/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Adobe Flash Player "newfunction" Invalid Pointer Use)
ExploitHub (EH-11-164)
Reference Information
CVE: CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-1297, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, CVE-2010-2212