RHEL 6 : acroread (RHSA-2010:0934)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0934 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes two vulnerabilities in Adobe Reader...

acroread: remote DoS or possible arbitrary code execution via EScript.api plugin

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix two security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS...

acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26)

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

Adobe Acrobat and Reader 'printSeps()' Function Heap Corruption Vulnerability

This host is installed with Adobe Reader/Acrobat and is prone to heap corruption Vulnerability OpenVAS Vulnerability Test $Id: gbadobeprdtsprintsepsmemcrptnvulnwin.nasl 6475 2017-06-29 06:35:11Z cfischer $ Adobe Acrobat and Reader 'printSeps' Function Heap Corruption Vulnerability Authors: Antu...

Adobe Reader 'printSeps()' Function Heap Corruption Vulnerability - Linux

Adobe Reader is prone to a heap corruption vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Assessing the Adobe Reader X Sandbox

Over the past few years, malicious PDFs have become common place and a prefered vector for attackers. Last week, Adobe announced the release of Reader X – the much anticipated next major release of their ubiquitous document reader, which includes a new security feature called ”Protected Mode”...

Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28; CVE-2010-4091)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A heap corruption vulnerability exits in the way Adobe Acrobat and Reader handle specially craft...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

Adobe Reader < 9.4.1 Multiple Vulnerabilities (APSB10-28)

The version of Adobe Reader installed on the remote host is earlier than 9.4.1. Such versions are reportedly affected by multiple vulnerabilities : - A memory corruption vulnerability exists that could lead to code execution. Note that this issue does not affect Adobe Reader 8.x. CVE-2010-3654 - ...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26)

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll aka AuthPlayLib.bundle or libauthplay.so.0.0.0 in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

Adobe Products Content Code Execution Vulnerability (Windows)

This host has Adobe Acrobat or Adobe Reader or Adobe flash Player installed, and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeprdtsarbitrarycodeexecvulnnov10win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Products Arbitrary Code Execution...

Adobe Reader memory corruption

Memory corruption in undocumented PrintSeps javascript function...

CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

Memory corruption

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...

CVE-2010-4091

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document that triggers memory corruption,...