Executive Summary
| Summary | |
|---|---|
| Title | acroread security update |
| Informations | |||
|---|---|---|---|
| Name | RHSA-2009:1109 | First vendor Publication | 2009-06-17 |
| Vendor | RedHat | Last vendor Modification | 2009-06-17 |
| Severity (Vendor) | Critical | Revision | 01 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Problem Description: Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 Extras - i386, x86_64 Red Hat Desktop version 3 Extras - i386, x86_64 Red Hat Enterprise Linux ES version 3 Extras - i386, x86_64 Red Hat Enterprise Linux WS version 3 Extras - i386, x86_64 Red Hat Enterprise Linux AS version 4 Extras - i386, x86_64 Red Hat Desktop version 4 Extras - i386, x86_64 Red Hat Enterprise Linux ES version 4 Extras - i386, x86_64 Red Hat Enterprise Linux WS version 4 Extras - i386, x86_64 RHEL Desktop Supplementary (v. 5 client) - i386, x86_64 RHEL Supplementary (v. 5 server) - i386, x86_64 3. Description: Adobe Reader allows users to view and print documents in Portable Document Format (PDF). Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857, CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028) All Adobe Reader users should install these updated packages. They contain Adobe Reader version 8.1.6, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 505049 - acroread: multiple security fixes in version 8.1.6 (APSB09-07) |
Original Source
| Url : https://rhn.redhat.com/errata/RHSA-2009-1109.html |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 69 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 23 % | CWE-399 | Resource Management Errors |
| 8 % | CWE-189 | Numeric Errors (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:22229 | |||
| Oval ID: | oval:org.mitre.oval:def:22229 | ||
| Title: | ELSA-2009:1109: acroread security update (Critical) | ||
| Description: | Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues." | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2009:1109-01 CVE-2009-0198 CVE-2009-0509 CVE-2009-0510 CVE-2009-0511 CVE-2009-0512 CVE-2009-0888 CVE-2009-0889 CVE-2009-1855 CVE-2009-1856 CVE-2009-1857 CVE-2009-1858 CVE-2009-1859 CVE-2009-1861 CVE-2009-2028 | Version: | 61 |
| Platform(s): | Oracle Linux 5 | Product(s): | acroread |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-09-09 | Name : SuSE Security Summary SUSE-SR:2009:014 File : nvt/suse_sr_2009_014.nasl |
| 2009-07-29 | Name : Gentoo Security Advisory GLSA 200907-06 (acroread) File : nvt/glsa_200907_06.nasl |
| 2009-07-06 | Name : SuSE Security Advisory SUSE-SA:2009:035 (acroread) File : nvt/suse_sa_2009_035.nasl |
| 2009-07-06 | Name : SuSE Security Summary SUSE-SR:2009:012 File : nvt/suse_sr_2009_012.nasl |
| 2009-06-23 | Name : RedHat Security Advisory RHSA-2009:1109 File : nvt/RHSA_2009_1109.nasl |
| 2009-06-16 | Name : Adobe Reader Multiple BOF Vulnerabilities - Jun09 (Linux) File : nvt/gb_adobe_prdts_mult_bof_vuln_jun09_lin.nasl |
| 2009-06-16 | Name : Adobe Reader/Acrobat Multiple BOF Vulnerabilities - Jun09 (Win) File : nvt/gb_adobe_prdts_mult_bof_vuln_jun09_win.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 56119 | Adobe Reader / Acrobat Multiple Unspecified Issues (Internal) |
| 56118 | Adobe Reader / Acrobat PDF File JPX (aka JPEG2000) Stream Handling Multiple O... |
| 56117 | Adobe Reader / Acrobat Unspecified Memory Corruption |
| 56116 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Memory Corruption |
| 56115 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0512) |
| 56114 | Adobe Reader / Acrobat PDF File TrueType Font Handling Memory Corruption |
| 56113 | Adobe Reader / Acrobat PDF File FlateDecode Filter Parameter Handling Unspeci... |
| 56112 | Adobe Reader / Acrobat U3D Model Crafted Extension Block Handling Overflow |
| 56111 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0889) |
| 56110 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0888) |
| 56109 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0511) |
| 56108 | Adobe Reader / Acrobat JBIG2 Filter Unspecified Remote Overflow (2009-0510) |
| 56107 | Adobe Reader / Acrobat JBIG2 Filter Crafted File Handling Unspecified Overflow |
| 56106 | Adobe Reader / Acrobat JBIG2 Filter Huffman Encoded Text Region Segment Handl... |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2016-03-22 | Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 37712 - Revision : 1 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 28626 - Revision : 8 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 28303 - Revision : 7 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat Reader JPX malformed code-block width memory corruption attempt RuleID : 25767 - Revision : 6 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat Reader FlateDecode integer overflow attempt RuleID : 25588 - Revision : 5 - Type : FILE-PDF |
| 2014-01-10 | Adobe RoboHelp Server Arbitrary File Upload and Execute RuleID : 17529 - Revision : 10 - Type : SERVER-WEBAPP |
| 2014-01-10 | Adobe Acrobat and Adobe Acrobat Reader U3D RHAdobeMeta buffer overflow attempt RuleID : 17526 - Revision : 14 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat Reader FlateDecode integer overflow attempt RuleID : 15709 - Revision : 19 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat Reader JPX malformed code-block width memory corruption attempt RuleID : 15562 - Revision : 14 - Type : FILE-PDF |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6331.nasl - Type : ACT_GATHER_INFO |
| 2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-6398.nasl - Type : ACT_GATHER_INFO |
| 2009-10-06 | Name : The remote openSUSE host is missing a security update. File : suse_acroread-6332.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread-090701.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-090806.nasl - Type : ACT_GATHER_INFO |
| 2009-08-28 | Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_912.nasl - Type : ACT_GATHER_INFO |
| 2009-08-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1109.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-090701.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-090701.nasl - Type : ACT_GATHER_INFO |
| 2009-07-13 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200907-06.nasl - Type : ACT_GATHER_INFO |
| 2009-06-11 | Name : The PDF file viewer on the remote Windows host is affected by multiple vulner... File : adobe_reader_912.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:52:36 |
|
