Adobe Reader 7.1.0

This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Summuary
CPE Name	cpe:/a:adobe:reader:7.1.0

Detail
Vendor	Adobe	First view	2008-11-05
Product	Reader	Last view	2016-09-16
Version	7.1.0	Type	Application
Edition
Language
Update

CPE Product	cpe:/a:adobe:reader

Activity : Overall

Related : CVE

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.

	Date	Alert	Access Vector	Access Complexity	Authentication
10	2016-09-16	CVE-2016-6938	Network	Low	None Requ...
10	2016-09-16	CVE-2016-6937	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4270	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4269	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4268	Network	Low	None Requ...
Hide \| Show 20 More...

	Date	Alert	Access Vector	Access Complexity	Authentication
10	2016-08-26	CVE-2016-4267	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4266	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4265	Network	Low	None Requ...
10	2016-08-26	CVE-2016-4119	Network	Low	None Requ...
6.8	2016-07-12	CVE-2016-4255	Network	Medium	None Requ...
10	2016-07-12	CVE-2016-4254	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4252	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4251	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4250	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4215	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4214	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4213	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4212	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4211	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4210	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4209	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4208	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4207	Network	Low	None Requ...
10	2016-07-12	CVE-2016-4206	Network	Low	None Requ...

CWE : Common Weakness Enumeration

%	id	Name
79% (87)	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
8% (9)	CWE-284	Access Control (Authorization) Issues
5% (6)	CWE-20	Improper Input Validation
2% (3)	CWE-200	Information Exposure
1% (2)	CWE-399	Resource Management Errors
Hide \| Show 3 More...

%	id	Name
0% (1)	CWE-416	Use After Free
0% (1)	CWE-264	Permissions, Privileges, and Access Controls
0% (1)	CWE-254	Security Features

Oval Markup Language : Definitions

OvalID	Name
oval:org.mitre.oval:def:22747	ELSA-2008:0974: acroread security update (Critical)
oval:org.mitre.oval:def:6534	Adobe Reader and Acrobat allow to execute arbitrary code via a crafted PDF file
oval:org.mitre.oval:def:22770	ELSA-2009:0376: acroread security update (Critical)

SAINT Exploits

Description	Link
Adobe Reader Javascript API getAnnots method vulnerability	More info here
Adobe Acrobat JavaScript getIcon method buffer overflow	More info here
Adobe Reader FlateDecode filter TIFF Predictor integer overflow	More info here

Open Source Vulnerability Database (OSVDB)

id	Description
58729	Adobe Reader / Acrobat ParamX Parameter PDF File Handling Overflow
54130	Adobe Reader getAnnots() JavaScript Method PDF Handling Memory Corruption
53648	Adobe Acrobat Reader PDF JBIG2 Symbol Dictionary Segment Handling Overflow
53647	Adobe Acrobat getIcon() Function PDF Handling Overflow
53646	Adobe Acrobat Reader JBIG2 Input Validation Unspecified Arbitrary Code Execution
Hide \| Show 7 More...

id	Description
53645	Adobe Acrobat Reader JBIG2 Unspecified Memory Corruption Arbitrary Code Execu...
50247	Adobe Reader / Acrobat Type 1 Font Handling Arbitrary Remote Code Execution
50246	Adobe Acrobat PDF File Multiple Object Handling Memory Corruption
50245	Adobe Reader / Acrobat Unspecified JavaScript Method Arbitrary Remote Code Ex...
50244	Adobe Reader / Acrobat on *nix Insecure RPATH Search Path Subversion Privileg...
50243	Adobe Reader Download Manager Unspecified Remote Internet Security Options Ma...
49541	Adobe Acrobat / Reader Download Manager AcroJS Function Heap Corruption Arbit...

Milw0rm Exploits

id	Description
2009-04-29	Adobe Reader 8.1.4/9.1 GetAnnots() Remote Code Execution Exploit

ExploitDB Exploits

id	Description
9579	Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit

OpenVAS Exploits

id	Description
2010-04-07	Name : Adobe Reader PDF Handling Code Execution Vulnerability (Win) File : nvt/gb_adobe_reader_exe_code_exec_vuln_win.nasl
2009-10-27	Name : Gentoo Security Advisory GLSA 200910-03 (acroread) File : nvt/glsa_200910_03.nasl
2009-10-27	Name : SuSE Security Advisory SUSE-SA:2009:049 (acroread, acroread_ja) File : nvt/suse_sa_2009_049.nasl
2009-10-22	Name : Adobe Reader Multiple Vulnerabilities - Oct09 (Linux) File : nvt/gb_adobe_prdts_mult_vuln_oct09_lin.nasl
2009-10-22	Name : Adobe Reader/Acrobat Multiple Vulnerabilities - Oct09 (Win) File : nvt/gb_adobe_prdts_mult_vuln_oct09_win.nasl
Hide \| Show 19 More...

id	Description
2009-10-19	Name : RedHat Security Advisory RHSA-2009:1499 File : nvt/RHSA_2009_1499.nasl
2009-10-13	Name : Solaris Update for Adobe Acrobat Reader 121104-10 File : nvt/gb_solaris_121104_10.nasl
2009-07-29	Name : Gentoo Security Advisory GLSA 200907-06 (acroread) File : nvt/glsa_200907_06.nasl
2009-06-15	Name : SuSE Security Summary SUSE-SR:2009:011 File : nvt/suse_sr_2009_011.nasl
2009-06-05	Name : Ubuntu USN-743-1 (gs-gpl) File : nvt/ubuntu_743_1.nasl
2009-06-05	Name : Ubuntu USN-744-1 (lcms) File : nvt/ubuntu_744_1.nasl
2009-05-25	Name : SuSE Security Advisory SUSE-SA:2009:027 (acroread) File : nvt/suse_sa_2009_027.nasl
2009-05-20	Name : RedHat Security Advisory RHSA-2009:0478 File : nvt/RHSA_2009_0478.nasl
2009-05-11	Name : Adobe Reader Denial of Service Vulnerability (May09) File : nvt/gb_adobe_reader_dos_vuln_may09_lin.nasl
2009-05-11	Name : Adobe Reader/Acrobat Denial of Service Vulnerability (May09) File : nvt/gb_adobe_reader_dos_vuln_may09_win.nasl
2009-04-28	Name : SuSE Security Summary SUSE-SR:2009:009 File : nvt/suse_sr_2009_009.nasl
2009-04-20	Name : Gentoo Security Advisory GLSA 200904-17 (acroread) File : nvt/glsa_200904_17.nasl
2009-03-31	Name : RedHat Security Advisory RHSA-2009:0376 File : nvt/RHSA_2009_0376.nasl
2009-03-31	Name : SuSE Security Advisory SUSE-SA:2009:014 (acroread) File : nvt/suse_sa_2009_014.nasl
2009-03-03	Name : Buffer Overflow Vulnerability in Adobe Reader (Linux) File : nvt/secpod_adobe_prdts_bof_vuln_lin.nasl
2009-03-03	Name : Buffer Overflow Vulnerability in Adobe Acrobat and Reader (Win) File : nvt/secpod_adobe_prdts_bof_vuln_win.nasl
2009-01-20	Name : Gentoo Security Advisory GLSA 200901-09 (acroread) File : nvt/glsa_200901_09.nasl
2008-11-05	Name : Adobe Reader/Acrobat Multiple Vulnerabilities - Nov08 (Win) File : nvt/gb_adobe_prdts_mult_vuln_nov08_win.nasl
2008-11-05	Name : Adobe Reader/Acrobat Multiple Vulnerabilities - Nov08 (Linux) File : nvt/gb_adobe_prdts_mult_vuln_nov08_lin.nasl

Snort® IPS/IDS

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.

Date	Description
2016-09-17	Adobe Acrobat invalid embedded font memory corruption attempt RuleID : 39890 - Type : FILE-PDF - Revision : 1
2016-09-17	Adobe Acrobat invalid embedded font memory corruption attempt RuleID : 39889 - Type : FILE-PDF - Revision : 1
2016-09-13	Adobe Reader CoolType engine FlateDecode use-after-free attempt RuleID : 39865 - Type : FILE-PDF - Revision : 1
2016-09-13	Adobe Reader CoolType engine FlateDecode use-after-free attempt RuleID : 39864 - Type : FILE-PDF - Revision : 1
2016-08-31	Adobe Reader malformed ICC profile memory corruption attempt RuleID : 39753 - Type : FILE-PDF - Revision : 1
Hide \| Show 20 More...

Date	Description
2016-08-31	Adobe Reader malformed ICC profile memory corruption attempt RuleID : 39752 - Type : FILE-PDF - Revision : 1
2016-08-25	Adobe Reader malformed CID identity-H font file out of bounds read attempt RuleID : 39732 - Type : FILE-PDF - Revision : 1
2016-08-25	Adobe Reader malformed CID identity-H font file out of bounds read attempt RuleID : 39731 - Type : FILE-PDF - Revision : 1
2016-08-23	Adobe Flash Player ActionScript setFocus use after free attempt RuleID : 39704 - Type : FILE-PDF - Revision : 1
2016-08-23	Adobe Flash Player ActionScript setFocus use after free attempt RuleID : 39703 - Type : FILE-PDF - Revision : 1
2016-08-23	Adobe Acrobat Reader malformed embeded TTF file memory corruption attempt RuleID : 39700 - Type : FILE-PDF - Revision : 2
2016-08-23	Adobe Acrobat Reader malformed embeded TTF file memory corruption attempt RuleID : 39699 - Type : FILE-PDF - Revision : 2
2016-08-23	Adobe Acrobat Reader malformed embeded TTF file memory corruption attempt RuleID : 39688 - Type : FILE-PDF - Revision : 3
2016-08-23	Adobe Acrobat Reader malformed embeded TTF file memory corruption attempt RuleID : 39687 - Type : FILE-PDF - Revision : 3
2016-08-18	Adobe Reader submitForm SOP bypass attempt RuleID : 39670 - Type : FILE-PDF - Revision : 1
2016-08-18	Adobe Reader submitForm SOP bypass attempt RuleID : 39669 - Type : FILE-PDF - Revision : 1
2016-08-18	Adobe Acrobat Reader JPEG handling memory corruption attempt RuleID : 39657 - Type : FILE-FLASH - Revision : 1
2016-08-18	Adobe Acrobat Reader JPEG handling memory corruption attempt RuleID : 39656 - Type : FILE-FLASH - Revision : 1
2016-08-18	Adobe Reader malformed CID identity-H font file out of bounds read attempt RuleID : 39644 - Type : FILE-PDF - Revision : 1
2016-08-18	Adobe Reader malformed CID identity-H font file out of bounds read attempt RuleID : 39643 - Type : FILE-PDF - Revision : 1
2016-08-13	Adobe Acrobat Reader JPEG parsing out of bounds read attempt RuleID : 39570 - Type : FILE-PDF - Revision : 1
2016-08-13	Adobe Acrobat Reader JPEG parsing out of bounds read attempt RuleID : 39569 - Type : FILE-PDF - Revision : 1
2016-08-13	Adobe Acrobat Reader PostScript font parsing memory corruption attempt RuleID : 39557 - Type : FILE-PDF - Revision : 1
2016-08-13	Adobe Acrobat Reader PostScript font parsing memory corruption attempt RuleID : 39556 - Type : FILE-PDF - Revision : 1
2016-08-13	Adobe Reader embedded TTF heap overflow attempt RuleID : 39547 - Type : FILE-PDF - Revision : 1

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.

id	Description
2016-07-13	Name : The version of Adobe Acrobat installed on the remote Windows host is affected... File : adobe_acrobat_apsb16-26.nasl - Type : ACT_GATHER_INFO
2016-07-13	Name : The version of Adobe Reader installed on the remote Windows host is affected ... File : adobe_reader_apsb16-26.nasl - Type : ACT_GATHER_INFO
2016-07-13	Name : The version of Adobe Acrobat installed on the remote Mac OS X host is affecte... File : macosx_adobe_acrobat_apsb16-26.nasl - Type : ACT_GATHER_INFO
2016-07-13	Name : The version of Adobe Reader installed on the remote Mac OS X host is affected... File : macosx_adobe_reader_apsb16-26.nasl - Type : ACT_GATHER_INFO
2016-05-12	Name : The version of Adobe Acrobat installed on the remote Windows host is affected... File : adobe_acrobat_apsb16-14.nasl - Type : ACT_GATHER_INFO
Hide \| Show 20 More...

id	Description
2016-05-12	Name : The version of Adobe Reader installed on the remote Windows host is affected ... File : adobe_reader_apsb16-14.nasl - Type : ACT_GATHER_INFO
2016-05-12	Name : The version of Adobe Acrobat installed on the remote Mac OS X host is affecte... File : macosx_adobe_acrobat_apsb16-14.nasl - Type : ACT_GATHER_INFO
2016-05-12	Name : The version of Adobe Reader installed on the remote Mac OS X host is affected... File : macosx_adobe_reader_apsb16-14.nasl - Type : ACT_GATHER_INFO
2016-01-14	Name : The version of Adobe Acrobat installed on the remote Windows host is affected... File : adobe_acrobat_apsb16-02.nasl - Type : ACT_GATHER_INFO
2016-01-14	Name : The version of Adobe Reader installed on the remote Windows host is affected ... File : adobe_reader_apsb16-02.nasl - Type : ACT_GATHER_INFO
2016-01-14	Name : The version of Adobe Acrobat installed on the remote Mac OS X host is affecte... File : macosx_adobe_acrobat_apsb16-02.nasl - Type : ACT_GATHER_INFO
2016-01-14	Name : The version of Adobe Reader installed on the remote Mac OS X host is affected... File : macosx_adobe_reader_apsb16-02.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6121.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6260.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6582.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6583.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6161.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6264.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6584.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6585.nasl - Type : ACT_GATHER_INFO
2009-10-30	Name : The remote openSUSE host is missing a security update. File : suse_acroread-6588.nasl - Type : ACT_GATHER_INFO
2009-10-26	Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-091022.nasl - Type : ACT_GATHER_INFO
2009-10-26	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread-091022.nasl - Type : ACT_GATHER_INFO
2009-10-26	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-091022.nasl - Type : ACT_GATHER_INFO
2009-10-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200910-03.nasl - Type : ACT_GATHER_INFO

vDNA Monitoring

	no vDNA Monitoring
Monitor this version now !

Global informations

Mapping	Total
CVE ID(s)	141
CWE ID(s)	8
OVALid	3
Saint Exploit(s)	3
osvdb(s)	12
Milw0rm Exploit(s)	1
ExploitDB Exploit(s)	1
OpenVAS Exploit(s)	24
Snort® Rule(s)	265
Nessus® Exploit(s)	54

	%	Affected CVE
Critical (9-10)	88.65%	125
High (7-8.9)	2.84%	4
Medium (4-6.9)	8.51%	12
Low (0.1-3.9)	0%	0
Pending... (0)	0%	0

Adobe Reader 7.1.0

Summary

Activity : Overall

Related : CVE

CWE : Common Weakness Enumeration

Oval Markup Language : Definitions

SAINT Exploits

Open Source Vulnerability Database (OSVDB)

Milw0rm Exploits

ExploitDB Exploits

OpenVAS Exploits

Snort® IPS/IDS

Nessus® Vulnerability Scanner

vDNA Monitoring

Global informations

Risk Rating (CVSS)

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU