FreeBSD : acroread -- insecure temporary file creation (107692a1-ee6c-11d9-8310-0001020eed82)

Secunia Research reports : Secunia has discovered a security issue in Adobe Reader for Linux, which can be exploited by malicious, local users to gain knowledge of sensitive information. The problem is caused due to temporary files being created with permissions based on a user's umask in the...

FreeBSD : acroread -- XML External Entity vulnerability (02bc9b7c-e019-11d9-a8bd-000cf18bbe54)

Sverre H. Huseby discovered a vulnerability in Adobe Acrobat and Adobe Reader. Under certain circumstances, using XML scripts it is possible to discover the existence of local files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2002-1764

acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2002-1764

CVE-2002-1764 affects acroread/Adobe Reader 4.05 on Linux . The vulnerability is a local file overwrite via a symlink attack on temporary files, enabling a local user to overwrite arbitrary files. The connected OpenVAS entry corroborates a symlink attack vulnerability in Adobe Reader. No further ...

CVE-2002-1764: Undefined Security Weakness

acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files...

GLSA-200408-14 : acroread: UUDecode filename buffer overflow

The remote host is affected by the vulnerability described in GLSA-200408-14 acroread: UUDecode filename buffer overflow acroread contains two errors in the handling of UUEncoded filenames. First, it fails to check the length of a filename before copying it into a fixed size buffer and, secondly,...

acroread: UUDecode filename buffer overflow

Background acroread is Adobe's Acrobat PDF reader for Linux. Description acroread contains two errors in the handling of UUEncoded filenames. First, it fails to check the length of a filename before copying it into a fixed size buffer and, secondly, it fails to check for the backtick shell...

CVE-2003-0142: Undefined Security Weakness

Adobe Acrobat Reader acroread 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifyin...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...