Lucene search
SuseSUSE-SA:2010:008HistoryJan 26, 2010 - 4:40 p.m.
remote code execution in acroread
2010-01-2616:40:23
lists.opensuse.org
20
0.972 High
EPSS
Percentile
99.8%
Specially crafted PDF files could crash acroread. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324). Acrobat reader was updated to version 9.3 to fix the security issues. Note: Due to integration issues with the major version update of acroread on SLE10 updates for SLE10 are not ready yet. Fixed packages will be submitted ASAP.
Solution
There is no known workaround, please install the update packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 11.0 | i586 | acroread | < 9.3-0.1 | acroread-9.3-0.1.i586.rpm |
| openSUSE | 11.2 | i586 | acroread | < 9.3-0.1.1 | acroread-9.3-0.1.1.i586.rpm |
| openSUSE | 11.1 | i586 | acroread | < 9.3-0.1.1 | acroread-9.3-0.1.1.i586.rpm |
| SUSE Linux Enterprise Server | 11 | i586 | acroread-debuginfo | < 9.3-0.1.1 | acroread-debuginfo-9.3-0.1.1.i586.rpm |
Related
openvas
openvas
SuSE Update for acroread SUSE-SA:2010:008
2010-01-29 00:00:00
SuSE Update for acroread SUSE-SA:2010:008
2010-01-29 00:00:00
Adobe Reader Multiple Vulnerabilities -jan10 (Linux)
2010-01-16 00:00:00
nessus
nessus
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6804)
2011-01-27 00:00:00
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6805)
2011-01-27 00:00:00
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)
2010-01-25 00:00:00
threatpost
threatpost
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
Attackers Targeting Unpatched Adobe Flaws
2009-12-15 14:26:19
redhat
redhat
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
[ MDVSA-2010:021 ] bind
2010-01-21 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2010-01-20 00:00:00
gzip vulnerabilities
2010-01-20 00:00:00
centos
centos
bind, caching security update
2010-01-20 17:59:57
oraclelinux
oraclelinux
bind security update
2010-01-20 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2010-06-01 00:00:00
debiancve
debiancve
slackware
slackware
[slackware-security] bind
2010-06-25 18:32:41
fedora
fedora
[SECURITY] Fedora 12 Update: bind-9.6.1-15.P3.fc12
2010-01-21 00:14:47
[SECURITY] Fedora 11 Update: gzip-1.3.12-10.fc11
2010-02-01 01:04:06
[SECURITY] Fedora 12 Update: gzip-1.3.12-14.fc12
2010-02-01 01:03:15
f5
f5
K15748 : BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
SOL15748 - BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
SOL17025 - BIND DNSSEC vulnerability CVE-2010-0097
2015-07-30 00:00:00
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2010-01-22 22:00:00
Code injection
2010-01-29 18:30:00
Code injection
2010-01-13 19:30:00
veracode
veracode
Cache Poisoning Attack
2020-04-10 00:41:38
cve
cve
osv
osv
bind9 - cache poisoning
2010-06-04 00:00:00
gzip - arbitrary code execution
2010-01-20 00:00:00
transmission - directory traversal
2010-01-07 00:00:00
debian
debian
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
2010-06-15 20:05:57
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
2010-06-04 19:22:30
[SECURITY] [DSA 1974-1] New gzip packages fix arbitrary code execution
2010-01-20 14:16:48
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 8 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 7 package bind version 9.3.6-alt7
2011-12-16 00:00:00
seebug
seebug
Transmission任意文件覆盖漏洞
2010-01-12 00:00:00
Adobe Reader/Acrobat 'newplayer()' JavaScript方法远程代码执行漏洞
2009-12-17 00:00:00
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
checkpoint_advisories
checkpoint_advisories
cisa_kev
cisa_kev
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
2022-06-08 00:00:00
Adobe Acrobat and Reader Use-After-Free Vulnerability
2022-06-08 00:00:00
packetstorm
packetstorm
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Reader / Acrobat Use-After-Free Calc.exe
2009-12-22 00:00:00
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
saint
saint
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
attackerkb
attackerkb
CVE-2009-4324
2009-12-15 00:00:00
cert
cert
exploitpack
exploitpack
Adobe Reader Acrobat - .PDF File Overflow
2009-12-23 00:00:00
canvas
canvas
Immunity Canvas: ACROBAT_NEWPLAYER
2009-12-15 02:30:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-4355
2010-01-13 00:00:00