Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SA:2010:058
HistoryDec 08, 2010 - 5:17 p.m.

remote code execution in acoread

2010-12-0817:17:01
lists.opensuse.org
31

EPSS

0.971

Percentile

99.8%

JSON

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.1 which addresses the issues.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Desktop11.1noarchacroread-fonts-zh_tw<Β 9.4.1-0.1.1acroread-fonts-zh_TW-9.4.1-0.1.1.noarch.rpm
SUSE Linux Enterprise Desktop11.1noarchacroread-fonts-zh_cn<Β 9.4.1-0.1.1acroread-fonts-zh_CN-9.4.1-0.1.1.noarch.rpm
SUSE Linux Enterprise Desktop11.1noarchacroread-fonts-ko<Β 9.4.1-0.1.1acroread-fonts-ko-9.4.1-0.1.1.noarch.rpm
openSUSE11.1i586acroread<Β 9.4.1-0.2.1acroread-9.4.1-0.2.1.i586.rpm
openSUSE11.1noarchacroread-fonts-ja<Β 9.4.1-0.2.1acroread-fonts-ja-9.4.1-0.2.1.noarch.rpm
openSUSE11.2noarchacroread-fonts-ja<Β 9.4.1-0.2.1acroread-fonts-ja-9.4.1-0.2.1.noarch.rpm
SUSE Linux Enterprise Desktop11.1i586acroread_ja<Β 9.4.1-0.1.1acroread_ja-9.4.1-0.1.1.i586.rpm
openSUSE11.2noarchacroread-cmaps<Β 9.4.1-0.2.1acroread-cmaps-9.4.1-0.2.1.noarch.rpm
openSUSE11.2i586acroread<Β 9.4.1-0.2.1acroread-9.4.1-0.2.1.i586.rpm
openSUSE11.3i586acroread<Β 9.4.1-0.2.1acroread-9.4.1-0.2.1.i586.rpm
Rows per page:
1-10 of 201

Related

nessus 38
redhat 4
openvas 25
packetstorm 1
threatpost 3
checkpoint_advisories 4
saint 4
prion 2
nvd 2
seebug 3
exploitpack 1
ubuntucve 2
cert 1
canvas 1
exploitdb 3
symantec 1
metasploit 1
cvelist 2
cve 2
gentoo 3
securityvulns 5
freebsd 1
suse 2
securelist 1
nessus
nessus
openSUSE Security Update : acroread (openSUSE-SU-2010:1030-1)
2011-05-05 00:00:00
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7266)
2011-01-27 00:00:00
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3638 / 3639)
2010-12-09 00:00:00
redhat
redhat
(RHSA-2010:0934) Critical: acroread security update
2010-12-01 00:00:00
(RHSA-2010:0834) Critical: flash-plugin security update
2010-11-08 00:00:00
(RHSA-2010:0867) Critical: flash-plugin security update
2010-11-10 00:00:00
openvas
openvas
SUSE: Security Advisory for acoread (SUSE-SA:2010:058)
2011-01-04 00:00:00
SuSE Update for acoread SUSE-SA:2010:058
2011-01-04 00:00:00
Adobe Products Content Code Execution Vulnerability (CVE-2010-3654) - Windows
2010-11-10 00:00:00
packetstorm
packetstorm
Adobe Flash Player "Button" Remote Code Execution
2010-11-03 00:00:00
threatpost
threatpost
Adobe Releases Emergency Fix for Critical Reader Flaws
2010-11-16 19:41:53
Adobe Accelerates Patch Schedule for Critical Flash Bug
2010-11-02 19:15:03
New Adobe Flash Bug Being Exploited
2010-10-28 14:03:47
checkpoint_advisories
checkpoint_advisories
Workaround for Adobe Flash Player Flash Content Parsing Code Execution Vulnerability (APSA10-05)
2010-11-01 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)
2010-11-01 00:00:00
Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28) - Ver2 (CVE-2010-4091)
2015-03-26 00:00:00
saint
saint
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
prion
prion
Memory corruption
2010-10-29 19:00:00
Memory corruption
2010-11-07 22:00:00
nvd
nvd
CVE-2010-3654
2010-10-29 19:00:02
CVE-2010-4091
2010-11-07 22:00:03
seebug
seebug
Adobe Flash Player authplay.dllεΊ“PDFζ–‡δ»Άθ§£ζžθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2010-11-01 00:00:00
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
2014-07-01 00:00:00
Adobe Flash Player "Button" Remote Code Execution
2014-07-01 00:00:00
exploitpack
exploitpack
Adobe Flash Player 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2010-3654
2010-10-29 00:00:00
CVE-2010-4091
2010-11-07 00:00:00
cert
cert
Adobe Flash code execution vulnerability
2010-10-28 00:00:00
canvas
canvas
Immunity Canvas: ADOBE_FLASH_BUTTON
2010-10-29 19:00:00
exploitdb
exploitdb
Adobe Flash Player - &#039;Button&#039; Arbitrary Code Execution (Metasploit)
2010-11-01 00:00:00
Adobe Flash Player &lt; 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
Acrobat Reader 9.4 - Memory Corruption
2010-11-04 00:00:00
symantec
symantec
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
2010-10-28 00:00:00
metasploit
metasploit
Adobe Flash Player "Button" Remote Code Execution
2010-11-01 22:34:13
cvelist
cvelist
CVE-2010-3654
2010-10-29 18:00:00
CVE-2010-4091
2010-11-07 21:00:00
cve
cve
CVE-2010-3654
2010-10-29 19:00:02
CVE-2010-4091
2010-11-07 22:00:03
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2011-01-21 00:00:00
Adobe Reader: Multiple vulnerabilities
2012-01-30 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2010-11-08 00:00:00
Security update available for Adobe Flash Player
2010-11-08 00:00:00
Adobe Reader / Acrobat multiple security vulnerabilities
2011-02-14 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2010-09-28 00:00:00
suse
suse
remote code execution in flash-player
2010-11-05 13:12:10
remote code execution in acroread
2011-03-07 16:51:18
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34

EPSS

0.971

Percentile

99.8%

JSON
Related for SUSE-SA:2010:058
nessus38redhat4openvas25packetstorm1threatpost3checkpoint_advisories4saint4prion2nvd2seebug3exploitpack1ubuntucve2cert1canvas1exploitdb3symantec1metasploit1cvelist2cve2gentoo3securityvulns5freebsd1suse2securelist1