Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files.

(CVE-2007-0048, CVE-2007-0045, CVE-2009-2564,CVE-2009-2979, CVE-2009-2980, CVE-2009-2981, CVE-2009-2982, CVE-2009-2983, CVE-2009-2985, CVE-2009-2986, CVE-2009-2988, CVE-2009-2990, CVE-2009-2991, CVE-2009-2992, CVE-2009-2993, CVE-2009-2994, CVE-2009-2996, CVE-2009-2997, CVE-2009-2998, CVE-2009-3431, CVE-2009-3458, CVE-2009-3459, CVE-2009-3462)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files.

(CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 / CVE-2009-2981 / CVE-2009-2982 / CVE-2009-2983 / CVE-2009-2985 / CVE-2009-2986 / CVE-2009-2988 / CVE-2009-2990 / CVE-2009-2991 / CVE-2009-2992 / CVE-2009-2993 / CVE-2009-2994 / CVE-2009-2996 / CVE-2009-2997 / CVE-2009-2998 / CVE-2009-3431 / CVE-2009-3458 / CVE-2009-3459 / CVE-2009-3462)

The version of Adobe Reader installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4.  Such versions are potentially affected by multiple vulnerabilities :

  - A heap overflow vulnerability. (CVE-2009-3459)

  - A memory corruption issue. (CVE-2009-2985)

  - Multiple heap overflow vulnerabilities. (CVE-2009-2986)

  - An invalid array index issue that could lead to code     execution. (CVE-2009-2990)

  - Multiple input validation vulnerabilities that could     lead to code execution. (CVE-2009-2993)

  - A buffer overflow issue. (CVE-2009-2994)

  - A heap overflow vulnerability. (CVE-2009-2997)

  - An input validation issue that could lead to code     execution. (CVE-2009-2998)

  - An input validation issue that could lead to code     execution. (CVE-2009-3458)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2983)

  - An integer overflow that leads to a denial of service.
    (CVE-2009-2980)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2996)

  - An input validation issue that could lead to a bypass     of Trust Manager restrictions. (CVE-2009-2981)

  - A certificate is used that, if compromised, could be used     in a social engineering attack. (CVE-2009-2982)

  - A stack overflow issue that could lead to a denial of     service. (CVE-2009-3431)

  - A XMP-XML entity expansion issue that could lead to a     denial of service attack. (CVE-2009-2979)

  - A remote denial of service issue in the ActiveX control.
    (CVE-2009-2987)

  - An input validation issue. (CVE-2009-2988)

  - An input validation issue specific to the ActiveX     control. (CVE-2009-2992)

  - A third-party web download product is used that could     lead to a local privilege escalation. (CVE-2009-2564)

  - A cross-site scripting issue when the browser plugin in     used with Google Chrome and Opera browsers.
    (CVE-2007-0048, CVE-2007-0045)

The version of Adobe Acrobat installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are reportedly affected by multiple vulnerabilities :

  - A heap overflow vulnerability. (CVE-2009-3459)

  - A memory corruption issue. (CVE-2009-2985)

  - Multiple heap overflow vulnerabilities. (CVE-2009-2986)

  - An invalid array index issue that could lead to code     execution. (CVE-2009-2990)

  - Multiple input validation vulnerabilities that could     lead to code execution. (CVE-2009-2993)

  - A buffer overflow issue. (CVE-2009-2994)

  - A heap overflow vulnerability. (CVE-2009-2997)

  - An input validation issue that could lead to code     execution. (CVE-2009-2998)

  - An input validation issue that could lead to code     execution. (CVE-2009-3458)

  - A memory corruption issue. (CVE-2009-3460)

  - An issue that could allow a malicious user to bypass     file extension security controls. (CVE-2009-3461)

  - An integer overflow vulnerability. (CVE-2009-2989)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2983)

  - An integer overflow that leads to a denial of service.
    (CVE-2009-2980)

  - A memory corruption issue that leads to a denial of     service. (CVE-2009-2996)

  - An image decoder issue that leads to a denial of service.
    (CVE-2009-2984)

  - An input validation issue that could lead to a bypass     of Trust Manager restrictions. (CVE-2009-2981)

  - A certificate is used that, if compromised, could be used     in a social engineering attack. (CVE-2009-2982)

  - A stack overflow issue that could lead to a denial of     service. (CVE-2009-3431)

  - A XMP-XML entity expansion issue that could lead to a     denial of service attack. (CVE-2009-2979)

  - A remote denial of service issue in the ActiveX control.
    (CVE-2009-2987)

  - An input validation issue. (CVE-2009-2988)

  - An input validation issue specific to the ActiveX     control. (CVE-2009-2992)

  - A cross-site scripting issue when the browser plugin in     used with Google Chrome and Opera browsers.     (CVE-2007-0048, CVE-2007-0045)

The remote host is affected by the vulnerability described in GLSA-200910-03 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities were discovered in Adobe Reader. For further     information please consult the CVE entries and the Adobe Security     Bulletin referenced below.
  Impact :

    A remote attacker might entice a user to open a specially crafted PDF     file, possibly resulting in the execution of arbitrary code with the     privileges of the user running the application, Denial of Service, the     creation of arbitrary files on the victim's system, 'Trust Manager'     bypass, or social engineering attacks.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
42247	openSUSE Security Update : acroread (acroread-1426)	Nessus	SuSE Local Security Checks	10/26/2009	1/14/2021	high
42251	SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)	Nessus	SuSE Local Security Checks	10/26/2009	1/14/2021	high
42120	Adobe Reader < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)	Nessus	Windows	10/14/2009	6/27/2018	high
42318	openSUSE 10 Security Update : acroread (acroread-6588)	Nessus	SuSE Local Security Checks	10/30/2009	1/14/2021	high
42244	openSUSE Security Update : acroread (acroread-1426)	Nessus	SuSE Local Security Checks	10/26/2009	1/14/2021	high
42119	Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)	Nessus	Windows	10/14/2009	5/31/2024	high
51693	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6582)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
51694	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6583)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
42239	GLSA-200910-03 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/26/2009	1/6/2021	high
42250	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)	Nessus	SuSE Local Security Checks	10/26/2009	1/14/2021	high
51708	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6584)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
51709	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6585)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high