9.3 - RHSA-2013:0551

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	acroread security update

Informations
Name	RHSA-2013:0551	First vendor Publication	2013-02-21
Vendor	RedHat	Last vendor Modification	2013-02-21
Severity (Vendor)	Critical	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated acroread packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64

3. Description:

Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

This update fixes two security flaws in Adobe Reader. These flaws are detailed in the Adobe Security bulletin APSB13-07, listed in the References section. A specially-crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2013-0640, CVE-2013-0641)

All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.5.4, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

5. Bugs fixed (http://bugzilla.redhat.com/):

911099 - CVE-2013-0640 CVE-2013-0641 acroread: Multiple unspecified vulnerabilities allow remote attackers to execute arbitrary code (APSB13-07)

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2013-0551.html

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-787	Out-of-bounds Write (CWE/SANS Top 25)
50 %	CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16296

Oval ID:	oval:org.mitre.oval:def:16296
Title:	Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.5.3, 10.x through 10.1.5, and 11.x through 11.0.1 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013, a different vulnerability than CVE-2013-0641
Description:	Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0641	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Adobe Reader Adobe Acrobat
Definition Synopsis:
Determine if the version of Adobe Reader 9 is less than or equal to 9.5.3 Adobe Reader 9 Series is installed AND Version of Adobe Reader is less than or equal to 9.5.3 OR Determine if the version of Adobe Reader 10 is less than or equal to 10.1.5 Adobe Reader 10.x is installed AND Version of Adobe Reader is less than or equal to 10.1.5 OR Determine if the version of Adobe Reader 11 is less than or equal to 11.0.01 Adobe Reader 11.x is installed AND Version of Adobe Reader is less than or equal to 11.0.01 OR Determine if the version of Adobe Acrobat 9 is less than or equal to 9.5.3 Adobe Acrobat 9 Series is installed AND Version of Adobe Acrobat is less than or equal to 9.5.3 OR Determine if the version of Adobe Acrobat 10 is less than or equal to 10.1.5 Adobe Acrobat 10.x is installed AND Version of Adobe Acrobat is less than or equal to 10.1.5 OR Determine if the version of Adobe Acrobat 11 is less than or equal to 11.0.01 Adobe Acrobat 11.x is installed AND Version of Adobe Acrobat is less than or equal to 11.0.01

Definition Id: oval:org.mitre.oval:def:16406

Oval ID:	oval:org.mitre.oval:def:16406
Title:	Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.5.3, 10.x through 10.1.5, and 11.x through 11.0.1 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013, a different vulnerability than CVE-2013-0641
Description:	Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0640	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Adobe Reader Adobe Acrobat
Definition Synopsis:
Determine if the version of Adobe Reader 9 is less than or equal to 9.5.3 Adobe Reader 9 Series is installed AND Version of Adobe Reader is less than or equal to 9.5.3 OR Determine if the version of Adobe Reader 10 is less than or equal to 10.1.5 Adobe Reader 10.x is installed AND Version of Adobe Reader is less than or equal to 10.1.5 OR Determine if the version of Adobe Reader 11 is less than or equal to 11.0.01 Adobe Reader 11.x is installed AND Version of Adobe Reader is less than or equal to 11.0.01 OR Determine if the version of Adobe Acrobat 9 is less than or equal to 9.5.3 Adobe Acrobat 9 Series is installed AND Version of Adobe Acrobat is less than or equal to 9.5.3 OR Determine if the version of Adobe Acrobat 10 is less than or equal to 10.1.5 Adobe Acrobat 10.x is installed AND Version of Adobe Acrobat is less than or equal to 10.1.5 OR Determine if the version of Adobe Acrobat 11 is less than or equal to 11.0.01 Adobe Acrobat 11.x is installed AND Version of Adobe Acrobat is less than or equal to 11.0.01

Definition Id: oval:org.mitre.oval:def:21027

Oval ID:	oval:org.mitre.oval:def:21027
Title:	RHSA-2013:0551: acroread security update (Critical)
Description:	Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0551-02 CVE-2013-0640 CVE-2013-0641	Version:	33
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	acroread
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section acroread is earlier than 0:9.5.4-1.el5_9 AND acroread-plugin is earlier than 0:9.5.4-1.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section acroread is earlier than 0:9.5.4-1.el6 AND acroread-plugin is earlier than 0:9.5.4-1.el6

Definition Id: oval:org.mitre.oval:def:23915

Oval ID:	oval:org.mitre.oval:def:23915
Title:	ELSA-2013:0551: acroread security update (Critical)
Description:	Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0551-02 CVE-2013-0640 CVE-2013-0641	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	acroread
Definition Synopsis:
Oracle Linux 6.x rpm test acroread is earlier than 0:9.5.4-1.el6 AND acroread-plugin is earlier than 0:9.5.4-1.el6

Definition Id: oval:org.mitre.oval:def:26112

Oval ID:	oval:org.mitre.oval:def:26112
Title:	SUSE-SU-2013:0349-1 -- Security update for acroread
Description:	Acrobat Reader has been updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. (CVE-2013-0640, CVE-2013-0641) More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-07.h tml <https://www.adobe.com/support/security/bulletins/apsb13-07. html>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0349-1 CVE-2013-0640 CVE-2013-0641	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11 SUSE Linux Enterprise Desktop 10	Product(s):	acroread
Definition Synopsis:
SUSE Linux Enterprise Desktop 11 release section SUSE Linux Enterprise Desktop 11.x is installed Packages match section acroread-cmaps RPM is earlier than 0:9.4.6-0.4.3.1 AND acroread-fonts-ja RPM is earlier than 0:9.4.6-0.4.3.1 AND acroread-fonts-ko RPM is earlier than 0:9.4.6-0.4.3.1 AND acroread-fonts-zh_CN RPM is earlier than 0:9.4.6-0.4.3.1 AND acroread-fonts-zh_TW RPM is earlier than 0:9.4.6-0.4.3.1 AND acroread RPM is earlier than 0:9.5.4-0.3.1 AND SUSE Linux Enterprise Desktop 10 release section SUSE Linux Enterprise Desktop 10 is installed Packages match section acroread-cmaps RPM is earlier than 0:9.4.6-0.6.60 AND acroread-fonts-ja RPM is earlier than 0:9.4.6-0.6.60 AND acroread-fonts-ko RPM is earlier than 0:9.4.6-0.6.60 AND acroread-fonts-zh_CN RPM is earlier than 0:9.4.6-0.6.60 AND acroread-fonts-zh_TW RPM is earlier than 0:9.4.6-0.6.60 AND acroread RPM is earlier than 0:9.5.4-0.6.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Acrobat cpe:2.3:a:adobe:acrobat:11.0.1:::::::* cpe:2.3:a:adobe:acrobat:11.0.0:::::::* cpe:2.3:a:adobe:acrobat:11.0:::::::* cpe:2.3:a:adobe:acrobat:10.1.9:::::::* cpe:2.3:a:adobe:acrobat:10.1.8:::::::* cpe:2.3:a:adobe:acrobat:10.1.7:::::::* cpe:2.3:a:adobe:acrobat:10.1.6:::::::* cpe:2.3:a:adobe:acrobat:10.1.5:::::::* cpe:2.3:a:adobe:acrobat:10.1.4:::::::* cpe:2.3:a:adobe:acrobat:10.1.3:::::::* cpe:2.3:a:adobe:acrobat:10.1.2:::::::* cpe:2.3:a:adobe:acrobat:10.1.15:::::::* cpe:2.3:a:adobe:acrobat:10.1.14:::::::* cpe:2.3:a:adobe:acrobat:10.1.13:::::::* cpe:2.3:a:adobe:acrobat:10.1.12:::::::* cpe:2.3:a:adobe:acrobat:10.1.11:::::::* cpe:2.3:a:adobe:acrobat:10.1.10:::::::* cpe:2.3:a:adobe:acrobat:10.1.1:::::::* cpe:2.3:a:adobe:acrobat:10.1.0:::::::* cpe:2.3:a:adobe:acrobat:10.1:::::::* cpe:2.3:a:adobe:acrobat:10.0.3:::::::* cpe:2.3:a:adobe:acrobat:10.0.2:::::::* cpe:2.3:a:adobe:acrobat:10.0.1:::::::* cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:::::* cpe:2.3:a:adobe:acrobat:10.0:::::::* cpe:2.3:a:adobe:acrobat:10.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:9.5.4:::::::* cpe:2.3:a:adobe:acrobat:9.5.3:::::::* cpe:2.3:a:adobe:acrobat:9.5.2:::::::* cpe:2.3:a:adobe:acrobat:9.5.1:::::::* cpe:2.3:a:adobe:acrobat:9.5:::::::* cpe:2.3:a:adobe:acrobat:9.4.7:::::::* cpe:2.3:a:adobe:acrobat:9.4.6:::::::* cpe:2.3:a:adobe:acrobat:9.4.6:-:::::: cpe:2.3:a:adobe:acrobat:9.4.5:::::::* cpe:2.3:a:adobe:acrobat:9.4.5:-:::::: cpe:2.3:a:adobe:acrobat:9.4.4:::::::* cpe:2.3:a:adobe:acrobat:9.4.4:-:::::: cpe:2.3:a:adobe:acrobat:9.4.3:::::::* cpe:2.3:a:adobe:acrobat:9.4.3:-:::::: cpe:2.3:a:adobe:acrobat:9.4.2:::::::* cpe:2.3:a:adobe:acrobat:9.4.2:-:::::: cpe:2.3:a:adobe:acrobat:9.4.1:::::::* cpe:2.3:a:adobe:acrobat:9.4.1:-:::::: cpe:2.3:a:adobe:acrobat:9.4:::::::* cpe:2.3:a:adobe:acrobat:9.3.4:::::::* cpe:2.3:a:adobe:acrobat:9.3.4:-:::::: cpe:2.3:a:adobe:acrobat:9.3.3:::::::* cpe:2.3:a:adobe:acrobat:9.3.2:::::::* cpe:2.3:a:adobe:acrobat:9.3.2:-:::::: cpe:2.3:a:adobe:acrobat:9.3.1:::::::* cpe:2.3:a:adobe:acrobat:9.3.1:-:::::: cpe:2.3:a:adobe:acrobat:9.3:::::::* cpe:2.3:a:adobe:acrobat:9.3:-:pro:::::* cpe:2.3:a:adobe:acrobat:9.2:::::::* cpe:2.3:a:adobe:acrobat:9.2:-:::::: cpe:2.3:a:adobe:acrobat:9.1.3:::::::* cpe:2.3:a:adobe:acrobat:9.1.3:-:::::: cpe:2.3:a:adobe:acrobat:9.1.2:::::::* cpe:2.3:a:adobe:acrobat:9.1.1:::::::* cpe:2.3:a:adobe:acrobat:9.1.1:-:::::: cpe:2.3:a:adobe:acrobat:9.1:::::::* cpe:2.3:a:adobe:acrobat:9.1::standard::::: cpe:2.3:a:adobe:acrobat:9.1:-:pro:::::* cpe:2.3:a:adobe:acrobat:9.0.0:::::::* cpe:2.3:a:adobe:acrobat:9.0:::::::* cpe:2.3:a:adobe:acrobat:9.0::standard::::: cpe:2.3:a:adobe:acrobat:9.0::professional::::: cpe:2.3:a:adobe:acrobat:9.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:9:::::::* cpe:2.3:a:adobe:acrobat:8.2.6:::::::* cpe:2.3:a:adobe:acrobat:8.2.5:::::::* cpe:2.3:a:adobe:acrobat:8.2.4:::::::* cpe:2.3:a:adobe:acrobat:8.2.3:::::::* cpe:2.3:a:adobe:acrobat:8.2.2:::::::* cpe:2.3:a:adobe:acrobat:8.2.1:::::::* cpe:2.3:a:adobe:acrobat:8.2:::::::* cpe:2.3:a:adobe:acrobat:8.1.7:::::::* cpe:2.3:a:adobe:acrobat:8.1.6:::::::* cpe:2.3:a:adobe:acrobat:8.1.5:::::::* cpe:2.3:a:adobe:acrobat:8.1.4:::::::* cpe:2.3:a:adobe:acrobat:8.1.4::standard::::: cpe:2.3:a:adobe:acrobat:8.1.4::professional::::: cpe:2.3:a:adobe:acrobat:8.1.3:::::::* cpe:2.3:a:adobe:acrobat:8.1.3::standard::::: cpe:2.3:a:adobe:acrobat:8.1.3::professional::::: cpe:2.3:a:adobe:acrobat:8.1.3:-:pro:::::* cpe:2.3:a:adobe:acrobat:8.1.2:::::::* cpe:2.3:a:adobe:acrobat:8.1.2::standard::::: cpe:2.3:a:adobe:acrobat:8.1.2::professional::::: cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:3d:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.2:unknown:standard:::::* cpe:2.3:a:adobe:acrobat:8.1.2:-:pro:::::* cpe:2.3:a:adobe:acrobat:8.1.1:::::::* cpe:2.3:a:adobe:acrobat:8.1.1::standard::::: cpe:2.3:a:adobe:acrobat:8.1.1::professional::::: cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:::::* cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:::::* cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:::::* cpe:2.3:a:adobe:acrobat:8.1:::::::* cpe:2.3:a:adobe:acrobat:8.1::standard::::: cpe:2.3:a:adobe:acrobat:8.1::windows::::: cpe:2.3:a:adobe:acrobat:8.0:::::::* cpe:2.3:a:adobe:acrobat:8.0::professional::::: cpe:2.3:a:adobe:acrobat:8.0::standard::::: cpe:2.3:a:adobe:acrobat:8.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:8:::::::* cpe:2.3:a:adobe:acrobat:7.1.4:::::::* cpe:2.3:a:adobe:acrobat:7.1.3:::::::* cpe:2.3:a:adobe:acrobat:7.1.2:::::::* cpe:2.3:a:adobe:acrobat:7.1.1:::::::* cpe:2.3:a:adobe:acrobat:7.1.1::standard::::: cpe:2.3:a:adobe:acrobat:7.1.0:::::::* cpe:2.3:a:adobe:acrobat:7.1::standard::::: cpe:2.3:a:adobe:acrobat:7.1:::::::* cpe:2.3:a:adobe:acrobat:7.1::professional::::: cpe:2.3:a:adobe:acrobat:7.0.9:::::::* cpe:2.3:a:adobe:acrobat:7.0.9::professional::::: cpe:2.3:a:adobe:acrobat:7.0.8:::::::* cpe:2.3:a:adobe:acrobat:7.0.8::elements::::: cpe:2.3:a:adobe:acrobat:7.0.8::standard::::: cpe:2.3:a:adobe:acrobat:7.0.8::professional::::: cpe:2.3:a:adobe:acrobat:7.0.7:::::::* cpe:2.3:a:adobe:acrobat:7.0.7::professional::::: cpe:2.3:a:adobe:acrobat:7.0.7::standard::::: cpe:2.3:a:adobe:acrobat:7.0.6:::::::* cpe:2.3:a:adobe:acrobat:7.0.6::professional::::: cpe:2.3:a:adobe:acrobat:7.0.6::standard::::: cpe:2.3:a:adobe:acrobat:7.0.5:::::::* cpe:2.3:a:adobe:acrobat:7.0.5::professional::::: cpe:2.3:a:adobe:acrobat:7.0.5::standard::::: cpe:2.3:a:adobe:acrobat:7.0.4:::::::* cpe:2.3:a:adobe:acrobat:7.0.4::professional::::: cpe:2.3:a:adobe:acrobat:7.0.4::standard::::: cpe:2.3:a:adobe:acrobat:7.0.3:::::::* cpe:2.3:a:adobe:acrobat:7.0.3::professional::::: cpe:2.3:a:adobe:acrobat:7.0.3::standard::::: cpe:2.3:a:adobe:acrobat:7.0.2:::::::* cpe:2.3:a:adobe:acrobat:7.0.2::professional::::: cpe:2.3:a:adobe:acrobat:7.0.2::standard::::: cpe:2.3:a:adobe:acrobat:7.0.1:::::::* cpe:2.3:a:adobe:acrobat:7.0.1::professional::::: cpe:2.3:a:adobe:acrobat:7.0.1::standard::::: cpe:2.3:a:adobe:acrobat:7.0:::::::* cpe:2.3:a:adobe:acrobat:7.0::standard::::: cpe:2.3:a:adobe:acrobat:7.0::professional::::: cpe:2.3:a:adobe:acrobat:7.0:-:pro:::::* cpe:2.3:a:adobe:acrobat:7:::::::* cpe:2.3:a:adobe:acrobat:6.0.6:::::::* cpe:2.3:a:adobe:acrobat:6.0.5:::::::* cpe:2.3:a:adobe:acrobat:6.0.4:::::::* cpe:2.3:a:adobe:acrobat:6.0.4::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.3:::::::* cpe:2.3:a:adobe:acrobat:6.0.3::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.2:::::::* cpe:2.3:a:adobe:acrobat:6.0.2::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0.1:::::::* cpe:2.3:a:adobe:acrobat:6.0.1::mac_os_x::::: cpe:2.3:a:adobe:acrobat:6.0:::::::* cpe:2.3:a:adobe:acrobat:6.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0.6:::::::* cpe:2.3:a:adobe:acrobat:5.0.5:::::::* cpe:2.3:a:adobe:acrobat:5.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0.10:::::::* cpe:2.3:a:adobe:acrobat:5.0.10::mac_os_x::::: cpe:2.3:a:adobe:acrobat:5.0:::::::* cpe:2.3:a:adobe:acrobat:5.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5c:::::::* cpe:2.3:a:adobe:acrobat:4.0.5c::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5a:::::::* cpe:2.3:a:adobe:acrobat:4.0.5a::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0.5:::::::* cpe:2.3:a:adobe:acrobat:4.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat:4.0:::::::* cpe:2.3:a:adobe:acrobat:4.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:3.1:::::::* cpe:2.3:a:adobe:acrobat:3.1::mac_os_x::::: cpe:2.3:a:adobe:acrobat:3.0:::::::* cpe:2.3:a:adobe:acrobat:3.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat:::::::: cpe:2.3:a:adobe:acrobat:::::classic:::* cpe:2.3:a:adobe:acrobat:-:::::edge::	184
Application	Adobe Acrobat Reader cpe:2.3:a:adobe:acrobat_reader:11.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.01:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.0:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.9:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.8:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.7:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.6:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.5:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.15:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.14:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.13:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.12:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.11:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.10:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.0:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0:::::::* cpe:2.3:a:adobe:acrobat_reader:9.5.4:::::::* cpe:2.3:a:adobe:acrobat_reader:9.5.3:::::::* cpe:2.3:a:adobe:acrobat_reader:9.5.2:::::::* cpe:2.3:a:adobe:acrobat_reader:9.5.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.5:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.7:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.6:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.5:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.4:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.3:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.2:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.4:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3.4:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3.3:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3.2:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3.0:::::::* cpe:2.3:a:adobe:acrobat_reader:9.3:::::::* cpe:2.3:a:adobe:acrobat_reader:9.2:::::::* cpe:2.3:a:adobe:acrobat_reader:9.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:9.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.1:::::::* cpe:2.3:a:adobe:acrobat_reader:9.0:::::::* cpe:2.3:a:adobe:acrobat_reader:9:::::::* cpe:2.3:a:adobe:acrobat_reader:8.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.6:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.4:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:::::: cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1:::::::* cpe:2.3:a:adobe:acrobat_reader:8.1::windows::::: cpe:2.3:a:adobe:acrobat_reader:8.0:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.3:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1.0:::::::* cpe:2.3:a:adobe:acrobat_reader:7.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.9:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.8:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.7:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.4:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:7.0:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.4:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.4::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.3::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.2::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0.1::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:6.0:::::::* cpe:2.3:a:adobe:acrobat_reader:6.0::reader_extensions::::: cpe:2.3:a:adobe:acrobat_reader:6.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.1:::::::* cpe:2.3:a:adobe:acrobat_reader:5.1::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0.9:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.9::unix::::: cpe:2.3:a:adobe:acrobat_reader:5.0.7:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.5::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0.11:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.10:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0.10::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:5.0:::::::* cpe:2.3:a:adobe:acrobat_reader:5.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.5:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5c:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5c::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0.5a:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5a::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0.5:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0.5::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:4.0:::::::* cpe:2.3:a:adobe:acrobat_reader:4.0::for_mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:3.02:::::::* cpe:2.3:a:adobe:acrobat_reader:3.01:::::::* cpe:2.3:a:adobe:acrobat_reader:3.0:::::::* cpe:2.3:a:adobe:acrobat_reader:3.0::mac_os_x::::: cpe:2.3:a:adobe:acrobat_reader:::::::: cpe:2.3:a:adobe:acrobat_reader:::::classic:::* cpe:2.3:a:adobe:acrobat_reader::::::android::* cpe:2.3:a:adobe:acrobat_reader:-:::::::*	128

ExploitDB Exploits

id	Description
2013-11-28	Adobe Acrobat Reader - ASLR/DEP Bypass Exploit with SANDBOX BYPASS

Snort® IPS/IDS

Date	Description
2016-11-11	Adobe Acrobat Reader XFA app.setTimeOut memory corruption attempt RuleID : 40431 - Revision : 3 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader known malicious variable exploit attempt RuleID : 28659 - Revision : 6 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader XML Java used in app.setTimeOut RuleID : 28658 - Revision : 6 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader XFA app.setTimeOut memory corruption attempt RuleID : 26021 - Revision : 13 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader known malicious variable exploit attempt RuleID : 25819 - Revision : 12 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader known malicious variable exploit attempt RuleID : 25818 - Revision : 12 - Type : FILE-PDF

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-151.nasl - Type : ACT_GATHER_INFO
2013-08-23	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201308-03.nasl - Type : ACT_GATHER_INFO
2013-02-27	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_acroread-130222.nasl - Type : ACT_GATHER_INFO
2013-02-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-8474.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0551.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_apsb13-07.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The version of Adobe Reader on the remote Windows host is affected by multipl... File : adobe_reader_apsb13-07.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The version of Adobe Reader on the remote Mac OS X host is affected by multip... File : macosx_adobe_reader_apsb13-07.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:56:55	Multiple Updates
2013-02-21 21:18:05	First insertion

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	5
CPE ID(s)	312
ExploitDB Exploit(s)	1
Snort® Rule(s)	6
Nessus® Exploit(s)	8

	Related
7.8	CVE-2013-0641
7.8	CVE-2013-0640
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)