LWN.net Logo

acroread: multiple vulnerabilities

Package(s):acroread CVE #(s):CVE-2007-5659 CVE-2007-5663 CVE-2007-5666 CVE-2007-0044
Created:February 22, 2008 Updated:March 3, 2008
Description: Several flaws were found in the way Adobe Reader processed malformed PDF files. An attacker could create a malicious PDF file which could execute arbitrary code if opened by a victim. A flaw was found in the way the Adobe Reader browser plug-in honored certain requests. A malicious PDF file could cause the browser to request an unauthorized URL, allowing for a cross-site request forgery attack.
Alerts:
Gentoo 200803-01:04 2008-03-02
Red Hat RHSA-2008:0144-01 2008-02-22

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds