acroread: multiple vulnerabilities [LWN.net]

Package(s):

acroread

CVE #(s):

CVE-2006-5857 CVE-2007-0045 CVE-2007-0046

Created:

January 11, 2007

Updated:

October 26, 2009

Description:

Adobes acrobat reader has the following vulnerabilities:

The Adobe Reader Plugin has a cross site scripting vulnerability that can be triggered by processes malformed URLs. Arbitrary JavaScript can be served by a malicious web server, leading to a cross-site scripting attack.

Maliciously crafted PDF files can be used to trigger two vulnerabilities, if an attacker can trick a user into viewing the files, arbitrary code can be executed with the user's privileges.

Alerts:

SuSE	SUSE-SA:2009:049	2009-10-26
Gentoo	200910-03	2009-10-25
Red Hat	RHSA-2007:0021-01	2007-01-22
Gentoo	200701-16	2007-01-22
SuSE	SUSE-SA:2007:011	2007-01-22
Red Hat	RHSA-2007:0017-01	2007-01-11

(Log in to post comments)

acroread: multiple vulnerabilities

Posted Jan 18, 2007 5:37 UTC (Thu) by roelofs (subscriber, #2599) [Link]

Acroread 7.0.9 is also available directly from Adobe:

http://www.adobe.com/products/acrobat/alternate.html

Greg