Bug 581417 – Acroread: Multiple code execution flaws (APSB10-09)

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 581417 - (CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202, CVE-2010-0203, CVE-2010-0204) Acroread: Multiple code execution flaws (APSB10-09)

Summary:	Acroread: Multiple code execution flaws (APSB10-09)

Status:	CLOSED ERRATA

Aliases:	CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202, CVE-2010-0203, CVE-2010-0204

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	urgent Severity urgent
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:	http://www.adobe.com/support/security...
Whiteboard:	impact=critical,source=adobe,reported...
Keywords:	Security

Depends On:	581435 581436
Blocks:
	Show dependency tree / graph

Reported:	2010-04-12 04:25 EDT by Jan Lieskovsky
Modified:	2015-07-29 09:46 EDT (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2010-04-14 05:50:05 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2010:0349	normal	SHIPPED_LIVE	Critical: acroread security update	2010-04-14 05:36:41 EDT

Groups: None (edit)

Description Jan Lieskovsky 2010-04-12 04:25:03 EDT

Tomorrow, on Tuesday 2010-04-13, Adobe is planning to release
an update for Adobe Reader 9.3.1 and earlier versions, to address
multiple security issues allowing code execution, whose description
is detailed in the Adobe Security Bulletin APSB10-09:

  [1] http://www.adobe.com/support/security/bulletins/apsb10-09.html

This update resolves a cross-site scripting vulnerability that
could lead to code execution (CVE-2010-0190).

This update resolves a prefix protocol handler vulnerability that
could lead to code execution (CVE-2010-0191).

This update resolves a denial of service vulnerability; arbitrary code
execution has not been demonstrated, but may be possible (CVE-2010-0192).

This update resolves a denial of service vulnerability; arbitrary code
execution has not been demonstrated, but may be possible (CVE-2010-0193).

This update resolves a memory corruption vulnerability that could
lead to code execution (CVE-2010-0194).

This update resolves a font handling vulnerability that could lead
to code execution (CVE-2010-0195).

This update resolves a denial of service vulnerability; arbitrary code
execution has not been demonstrated, but may be possible (CVE-2010-0196).

This update resolves a memory corruption vulnerability that could
lead to code execution (CVE-2010-0197).

This update resolves a buffer overflow vulnerability that could lead
to code execution (CVE-2010-0198).

This update resolves a buffer overflow vulnerability that could lead
to code execution (CVE-2010-0199).

This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-0201).

This update resolves a buffer overflow vulnerability that could lead
to code execution (CVE-2010-0202).

This update resolves a buffer overflow vulnerability that could lead
to code execution (CVE-2010-0203).

This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-0204).

Comment 2 Vincent Danen 2010-04-13 16:28:41 EDT

This issue is now public.

Comment 3 errata-xmlrpc 2010-04-14 05:36:47 EDT

This issue has been addressed in following products:

  Extras for RHEL 4
  Extras for Red Hat Enterprise Linux 5

Via RHSA-2010:0349 https://rhn.redhat.com/errata/RHSA-2010-0349.html

Note You need to log in before you can comment on or make changes to this bug.