LWN.net Logo

acroread: multiple vulnerabilities

Package(s):acroread CVE #(s):CVE-2008-0655 CVE-2008-0667 CVE-2008-0726
Created:February 18, 2008 Updated:March 3, 2008
Description:

From the SUSE advisory:

CVE-2008-0655: Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

CVE-2008-0667: The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document.

CVE-2008-0726: Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.

Alerts:
SuSE SUSE-SA:2008:009 2008-02-18
Red Hat RHSA-2008:0144-01 2008-02-22
Gentoo 200803-01:04 2008-03-02

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.