(RHSA-2010:0114) Critical: acroread security and bug fix update

2010-02-1800:00:00

access.redhat.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Adobe Reader allows users to view and print documents in Portable Document
Format (PDF).

This update fixes two vulnerabilities in Adobe Reader. These
vulnerabilities are summarized on the Adobe Security Advisory APSB10-07
page listed in the References section. A specially-crafted PDF file could
cause Adobe Reader to crash or, potentially, execute arbitrary code as the
user running Adobe Reader when opened. (CVE-2010-0186, CVE-2010-0188)

This update also fixes a bug where, on some systems, attempting to install
or upgrade the acroread packages failed due to a package dependency issue.
(BZ#557506)

All Adobe Reader users should install these updated packages. They contain
Adobe Reader version 9.3.1, which is not vulnerable to these issues and
fixes this bug. All running instances of Adobe Reader must be restarted for
the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5i386acroread< 9.3.1-1.el5acroread-9.3.1-1.el5.i386.rpm
RedHat5i386acroread-plugin< 9.3.1-1.el5acroread-plugin-9.3.1-1.el5.i386.rpm