int(5226)

Vulnerability Bulletins


Múltiples vulnerabilidades en Adobe Reader y Adobe Acrobat

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Avanzado
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Comercial Software
Affected software Adobe Reader 9.3.1
Adobe Acrobat 9.3.1
Adobe Reader 8.2.1
Adobe Acrobat 8.2.1

Description

Se han descubierto múltiples vulnerabilidades en Adobe Reader y Adobe Acrobat.

Un atacante remoto podría ejecutar código arbitrario o causar una denegación de servicio mediante documentos PDF especialmente diseñados.

Solution



Actualización de software

Adobe (APSB10-09)
Adobe Reader Windows
http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.
Adobe Reader Macintosh
http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.
Adobe Reader UNIX
http://get.adobe.com/reader/.
Adobe Acrobat
Acrobat Standard y Pro Windows
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.
Acrobat Pro Extended Windows
http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows.
Acrobat 3D Windows
http://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.
Acrobat Pro Macintosh
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.

Red Hat (RHSA-2010:0348-1)
RHEL Desktop Supplementary (v. 5 cliente)
RHEL Supplementary (v. 5 servidor)
RHEL Supplementary EUS (v. 5.4.z servidor)
Red Hat Enterprise Linux Extras (v. 4)
Red Hat Enterprise Linux Extras (v. 4.8.z)
https://rhn.redhat.com/

Standar resources

Property Value
CVE CVE-2010-0190
CVE-2010-0191
CVE-2010-0192
CVE-2010-0193
CVE-2010-0194
CVE-2010-0195
CVE-2010-0196
CVE-2010-0197
CVE-2010-0198
CVE-2010-0199
CVE-2010-0201
CVE-2010-0202
CVE-2010-0203
CVE-2010-0204
CVE-2010-1241
BID NULL

Other resources

Adobe Security Bulletin (APSB10-09)
http://www.adobe.com/support/security/bulletins/apsb10-09.html

Red Hat Security Advisory (RHSA-2010:0349-1)
https://rhn.redhat.com/errata/RHSA-2010-0349.html

Version history

Version Comments Date
1.0 Aviso emitido 2010-04-16
1.1 Aviso emitido por Red Hat (RHSA-2010:0349-1) 2010-04-19
Ministerio de Defensa
CNI
CCN
CCN-CERT