Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2010-0195
Vulnerability from cvelistv5
Published
2010-04-14 15:44
Modified
2024-08-07 00:37
Severity ?
EPSS score ?
Summary
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T00:37:54.023Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2010-0873",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"name": "TA10-103C",
"tags": [
"third-party-advisory",
"x_refsource_CERT",
"x_transferred"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"name": "39329",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/39329"
},
{
"name": "oval:org.mitre.oval:def:7420",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-04-13T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-18T12:57:01",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"name": "ADV-2010-0873",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"name": "TA10-103C",
"tags": [
"third-party-advisory",
"x_refsource_CERT"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"name": "39329",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/39329"
},
{
"name": "oval:org.mitre.oval:def:7420",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2010-0195",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2010-0873",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"name": "TA10-103C",
"refsource": "CERT",
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"name": "39329",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/39329"
},
{
"name": "oval:org.mitre.oval:def:7420",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
},
{
"name": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"refsource": "CONFIRM",
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2010-0195",
"datePublished": "2010-04-14T15:44:00",
"dateReserved": "2010-01-06T00:00:00",
"dateUpdated": "2024-08-07T00:37:54.023Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2010-0195\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2010-04-14T16:00:00.820\",\"lastModified\":\"2024-11-21T01:11:44.543\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"Adobe Reader y Acrobat v9.x anterior v9.3.2, y v8.x anterior v8.2.2 en Windows y Mac OS X, no maneja adecuadamente fuentes, lo que permite a atacantes ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":true,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AA53564-9ACD-4CFB-9AAC-A77440026A57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F475858-DCE2-4C93-A51A-04718DF17593\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88687272-4CD0-42A2-B727-C322ABDE3549\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B35CC915-EEE3-4E86-9E09-1893C725E07B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76201694-E5C5-4CA3-8919-46937AFDAAE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"397AB988-1C2C-4247-9B34-806094197CB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"562772F1-1627-438E-A6B8-7D1AA5536086\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F25C9167-C6D4-4264-9197-50878EDA2D96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD1D7308-09E9-42B2-8836-DC2326C62A9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5C251D2-4C9B-4029-8BED-0FCAED3B8E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2432AC17-5378-4C61-A775-5172FD44EC03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6BA82F4-470D-4A46-89B2-D2F3C8FA31C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39EDED39-664F-4B68-B422-2CCCA3B83550\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CF61F35-5905-4BA9-AD7E-7DB261D2F256\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26AE76F7-D7F6-4AF2-A5C6-708B5642C288\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"749FFB51-65D4-4A4B-95F3-742440276897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8665E53-EC1E-4B95-9064-2565BC12113E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24218FDA-F9DA-465A-B5D5-76A55C7EE04E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2C5F1C5-85CD-47B9-897F-E51D6902AF72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0E190FF-3EBC-44AB-8072-4D964E843E8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A624D44-C135-4ED3-9BA4-F4F8A044850B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B95C0A99-42E4-40A9-BF61-507E4E4DC052\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B9F55CC-3681-4A67-99D1-3F40447392D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9C0AC89-804B-44A1-929A-118993B6BAA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39B174C3-1BA6-4654-BFA4-CC126454E147\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"996EB48E-D2A8-49E4-915A-EBDE26A9FB94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97E20936-EE31-4CEB-A710-3165A28BAD69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5BEA847-A71E-4336-AB67-B3C38847C1C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39F6994B-6969-485B-9286-2592B11A47BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC533775-B52E-43F0-BF19-1473BE36232D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18D1C85E-42CC-46F2-A7B6-DAC3C3995330\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4670451-511E-496C-A78A-887366E1E992\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35994F76-CD13-4301-9134-FC0CBEA37D97\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CF61F35-5905-4BA9-AD7E-7DB261D2F256\"}]}]}],\"references\":[{\"url\":\"http://www.adobe.com/support/security/bulletins/apsb10-09.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/39329\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA10-103C.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/0873\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.adobe.com/support/security/bulletins/apsb10-09.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/39329\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA10-103C.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/0873\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
ghsa-p4m7-9364-7j9j
Vulnerability from github
Published
2022-05-02 06:10
Modified
2022-05-02 06:10
Details
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
{
"affected": [],
"aliases": [
"CVE-2010-0195"
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2010-04-14T16:00:00Z",
"severity": "HIGH"
},
"details": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.",
"id": "GHSA-p4m7-9364-7j9j",
"modified": "2022-05-02T06:10:51Z",
"published": "2022-05-02T06:10:51Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0195"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
},
{
"type": "WEB",
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/39329"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2010/0873"
}
],
"schema_version": "1.4.0",
"severity": []
}
var-201004-0124
Vulnerability from variot
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors. This vulnerability CVE-2010-0197 , CVE-2010-0201 and CVE-2010-0204 Is a different vulnerability.A third party may execute arbitrary code. User interaction is required in that the victim must be coerced into opening a malicious document or visiting a malicious URL.The specific flaw exists within the parsing of embedded fonts inside a PDF document. Upon parsing particular tables out of a font file the application will miscalculate an index used for seeking into a buffer. Later the application will begin to copy data into the calculated pointer corrupting the referenced data structure. Successful exploitation will lead to code execution under the context of the application. Failed exploit attempts will result in a denial-of-service condition. The following products are affected: Adobe Reader 9.3.1 and prior for Windows, Macintosh, and UNIX Adobe Acrobat 9.3.1 and prior for Windows and Macintosh Adobe Reader 8.2.1 and prior for Windows and Macintosh Acrobat 8.2.1 and prior for Windows and Macintosh NOTE: This issue was originally documented in BID 39329 (Adobe Acrobat and Reader April 2010 Multiple Remote Vulnerabilities); it has been assigned its own BID to better document the vulnerability.
I. These vulnerabilities affect Reader and Acrobat 9.3.1 and earlier 9.x versions, and 8.2.1 and earlier versions.
An attacker could exploit these vulnerabilities by convincing a user to open a specially crafted PDF file. The Adobe Reader browser plug-in is available for multiple web browsers and operating systems, which can automatically open PDF documents hosted on a website.
II.
III. For a fresh installation, first install Adobe Reader 9.3.0 or 8.2.0 and then use the automatic update feature or install the appropriate update referenced in APSB10-09. Acrobat JavaScript can be disabled using the Preferences menu (Edit -> Preferences -> JavaScript; uncheck Enable Acrobat JavaScript).
Adobe provides a framework to blacklist specific JavaScipt APIs. If JavaScript must be enabled, this feature may be useful when specific APIs are known to be vulnerable or used in attacks.
Prevent Internet Explorer from automatically opening PDF documents
The installer for Adobe Reader and Acrobat configures Internet Explorer to automatically open PDF files without any user interaction. This behavior can be reverted to a safer option that prompts the user by importing the following as a .REG file:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\AcroExch.Document.7] "EditFlags"=hex:00,00,00,00
Disable the display of PDF documents in the web browser
Preventing PDF documents from opening inside a web browser will partially mitigate this vulnerability. If this workaround is applied, it may also mitigate future vulnerabilities.
To prevent PDF documents from automatically being opened in a web browser, do the following:
- Open the Edit menu.
- Choose the Preferences option.
- Choose the Internet section.
- Uncheck the "Display PDF in browser" checkbox.
Do not access PDF documents from untrusted sources
Do not open unfamiliar or unexpected PDF documents, particularly those hosted on websites or delivered as email attachments. Please see Cyber Security Tip ST04-010.
IV. Please send email to cert@cert.org with "TA10-103C Feedback VU#352598" in the subject.
For instructions on subscribing to or unsubscribing from this mailing list, visit http://www.us-cert.gov/cas/signup.html.
Produced 2010 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
Revision History
April 13, 2010: Initial release
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBS8TuRj6pPKYJORa3AQJfzggAj8p3s/TrJT16ceFtRzLR31QBgRq6GxYr h8WnsGlj2WR71XjH219XaWx9Mj3KBWVxbAsNPmK0tEir7KA+n4DwZCewTDYRqfYs 8N7G9MOI68Z87+7zBiZAo0j5/lQuxLWyTF9PqWbX8gCWLqJWW46cEZCqg7OGRbYt w8coxdMXU6tM3WGoWAIKwLRtpQUdubcITPTrE7RATyLJ1422B9dkTSeSCuHHZs5d eXSPYzTQ1EOwHpuA5/a/or2SjeRPLQcpxb/8WKelSqwW3hpK4zviEnPt4cYyeNqW BQY06OQMTKch/nmniuEDuiwe69m0gTw7Tw2Dm6xrg6BLBy3A6GAwkQ== =CQ6i -----END PGP SIGNATURE----- . More details can be found at:
http://www.adobe.com/support/security/bulletins/apsb10-09.html
-- Disclosure Timeline: 2010-02-18 - Vulnerability reported to vendor 2010-04-13 - Coordinated public release of advisory
-- Credit: This vulnerability was discovered by: * Anonymous
-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.
Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:
http://www.zerodayinitiative.com
The ZDI is unique in how the acquired vulnerability information is used. Instead, upon notifying the affected product vendor, TippingPoint provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, TippingPoint provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.
Our vulnerability disclosure policy is available online at:
http://www.zerodayinitiative.com/advisories/disclosure_policy/
Follow the ZDI on Twitter:
http://twitter.com/thezdi
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201009-05
http://security.gentoo.org/
Severity: Normal Title: Adobe Reader: Multiple vulnerabilities Date: September 07, 2010 Bugs: #297385, #306429, #313343, #322857 ID: 201009-05
Synopsis
Multiple vulnerabilities in Adobe Reader might result in the execution of arbitrary code or other attacks. For further information please consult the CVE entries and the Adobe Security Bulletins referenced below.
Workaround
There is no known workaround at this time.
Resolution
All Adobe Reader users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/acroread-9.3.4"
References
[ 1 ] APSA10-01 http://www.adobe.com/support/security/advisories/apsa10-01.html [ 2 ] APSB10-02 http://www.adobe.com/support/security/bulletins/apsb10-02.html [ 3 ] APSB10-07 http://www.adobe.com/support/security/bulletins/apsb10-07.html [ 4 ] APSB10-09 http://www.adobe.com/support/security/bulletins/apsb10-09.html [ 5 ] APSB10-14 http://www.adobe.com/support/security/bulletins/apsb10-14.html [ 6 ] APSB10-16 http://www.adobe.com/support/security/bulletins/apsb10-16.html [ 7 ] CVE-2009-3953 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3953 [ 8 ] CVE-2009-4324 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4324 [ 9 ] CVE-2010-0186 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0186 [ 10 ] CVE-2010-0188 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0188 [ 11 ] CVE-2010-0190 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0190 [ 12 ] CVE-2010-0191 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0191 [ 13 ] CVE-2010-0192 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0192 [ 14 ] CVE-2010-0193 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0193 [ 15 ] CVE-2010-0194 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0194 [ 16 ] CVE-2010-0195 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0195 [ 17 ] CVE-2010-0196 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0196 [ 18 ] CVE-2010-0197 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0197 [ 19 ] CVE-2010-0198 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0198 [ 20 ] CVE-2010-0199 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0199 [ 21 ] CVE-2010-0201 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0201 [ 22 ] CVE-2010-0202 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0202 [ 23 ] CVE-2010-0203 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0203 [ 24 ] CVE-2010-0204 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0204 [ 25 ] CVE-2010-1241 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1241 [ 26 ] CVE-2010-1285 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1285 [ 27 ] CVE-2010-1295 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1295 [ 28 ] CVE-2010-1297 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1297 [ 29 ] CVE-2010-2168 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2168 [ 30 ] CVE-2010-2201 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2201 [ 31 ] CVE-2010-2202 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2202 [ 32 ] CVE-2010-2203 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2203 [ 33 ] CVE-2010-2204 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2204 [ 34 ] CVE-2010-2205 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2205 [ 35 ] CVE-2010-2206 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2206 [ 36 ] CVE-2010-2207 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2207 [ 37 ] CVE-2010-2208 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2208 [ 38 ] CVE-2010-2209 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2209 [ 39 ] CVE-2010-2210 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2210 [ 40 ] CVE-2010-2211 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2211 [ 41 ] CVE-2010-2212 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2212
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201009-05.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2010 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201004-0124",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.3.1"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1.1"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.3"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.2"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.2"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.0"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.3.1"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.0"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.3"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1.3"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.6,
"vendor": "adobe",
"version": "9.1.2"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.5"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.2"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.1"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "9.1.2"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.5"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.0"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.4"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.6"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.0"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.4"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.6"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.2.1"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "9.1.3"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.3"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.2.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.7"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1"
},
{
"model": "acrobat reader",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.7"
},
{
"model": "acrobat",
"scope": "eq",
"trust": 1.0,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "acrobat",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "acrobat",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "reader",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "reader",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "enterprise linux extras",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4 extras"
},
{
"model": "enterprise linux extras",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4.8.z extras"
},
{
"model": "rhel desktop supplementary",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "5 (client)"
},
{
"model": "rhel supplementary",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "5 (server)"
},
{
"model": "rhel supplementary eus",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "5.4.z (server)"
},
{
"model": "reader",
"scope": null,
"trust": 0.7,
"vendor": "adobe",
"version": null
},
{
"model": "enterprise linux ws extras",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux supplementary server",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "5"
},
{
"model": "enterprise linux extras",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux es extras",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux desktop supplementary client",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "5"
},
{
"model": "enterprise linux as extras",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "4"
},
{
"model": "desktop extras",
"scope": "eq",
"trust": 0.6,
"vendor": "redhat",
"version": "4"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1.3"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1.2"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.7"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.6"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.5"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.4"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.3"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.2"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.0"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2"
},
{
"model": "reader security updat",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1"
},
{
"model": "reader",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.0"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.1"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1.3"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1.2"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.1"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.7"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.6"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.4"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.3"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.1"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.2"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.1"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1"
},
{
"model": "acrobat standard",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.0"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.1"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.1"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.7"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.6"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.4"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.3"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.1"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2"
},
{
"model": "acrobat professional security updat",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1.2"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.6,
"vendor": "adobe",
"version": "8.1"
},
{
"model": "reader",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "reader",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "acrobat standard",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "acrobat standard",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "acrobat professional",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "acrobat professional",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "acrobat",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "9.3.2"
},
{
"model": "acrobat",
"scope": "ne",
"trust": 0.6,
"vendor": "adobe",
"version": "8.2.2"
},
{
"model": "linux enterprise desktop",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "11"
},
{
"model": "linux enterprise desktop sp3",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "10"
},
{
"model": "linux enterprise desktop sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "suse",
"version": "10"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.2"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.1"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.0"
},
{
"model": "linux",
"scope": null,
"trust": 0.3,
"vendor": "gentoo",
"version": null
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.1.3"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.1.2"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.2"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.1"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9"
},
{
"model": "acrobat professional",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "8.0"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "BID",
"id": "39417"
},
{
"db": "BID",
"id": "39329"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:adobe:acrobat",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:adobe:acrobat_reader",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:enterprise_linux",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:rhel_desktop_supplementary",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:rhel_supplementary",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:rhel_supplementary_eus",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An anonymous source via TippingPoint\u0027s Zero Day Initiative",
"sources": [
{
"db": "BID",
"id": "39417"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
}
],
"trust": 0.9
},
"cve": "CVE-2010-0195",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2010-0195",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2010-0195",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "HIGH",
"trust": 0.7,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-42800",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2010-0195",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2010-0195",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2010-0195",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201004-248",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-42800",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2010-0195",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors. This vulnerability CVE-2010-0197 , CVE-2010-0201 and CVE-2010-0204 Is a different vulnerability.A third party may execute arbitrary code. User interaction is required in that the victim must be coerced into opening a malicious document or visiting a malicious URL.The specific flaw exists within the parsing of embedded fonts inside a PDF document. Upon parsing particular tables out of a font file the application will miscalculate an index used for seeking into a buffer. Later the application will begin to copy data into the calculated pointer corrupting the referenced data structure. Successful exploitation will lead to code execution under the context of the application. Failed exploit attempts will result in a denial-of-service condition. \nThe following products are affected:\nAdobe Reader 9.3.1 and prior for Windows, Macintosh, and UNIX\nAdobe Acrobat 9.3.1 and prior for Windows and Macintosh\nAdobe Reader 8.2.1 and prior for Windows and Macintosh\nAcrobat 8.2.1 and prior for Windows and Macintosh\nNOTE: This issue was originally documented in BID 39329 (Adobe Acrobat and Reader April 2010 Multiple Remote Vulnerabilities); it has been assigned its own BID to better document the vulnerability. \n\n\nI. These\n vulnerabilities affect Reader and Acrobat 9.3.1 and earlier 9.x\n versions, and 8.2.1 and earlier versions. \n\n An attacker could exploit these vulnerabilities by convincing a\n user to open a specially crafted PDF file. The Adobe Reader browser\n plug-in is available for multiple web browsers and operating\n systems, which can automatically open PDF documents hosted on a\n website. \n\n\nII. \n\n\nIII. For a fresh installation, first install\n Adobe Reader 9.3.0 or 8.2.0 and then use the automatic update\n feature or install the appropriate update referenced in APSB10-09. Acrobat JavaScript can be disabled using the\n Preferences menu (Edit -\u003e Preferences -\u003e JavaScript; uncheck Enable\n Acrobat JavaScript). \n\n Adobe provides a framework to blacklist specific JavaScipt APIs. If\n JavaScript must be enabled, this feature may be useful when\n specific APIs are known to be vulnerable or used in attacks. \n\n Prevent Internet Explorer from automatically opening PDF documents\n\n The installer for Adobe Reader and Acrobat configures Internet\n Explorer to automatically open PDF files without any user\n interaction. This behavior can be reverted to a safer option that\n prompts the user by importing the following as a .REG file:\n\n Windows Registry Editor Version 5.00\n\n [HKEY_CLASSES_ROOT\\AcroExch.Document.7]\n \"EditFlags\"=hex:00,00,00,00\n\n Disable the display of PDF documents in the web browser\n\n Preventing PDF documents from opening inside a web browser will\n partially mitigate this vulnerability. If this workaround is\n applied, it may also mitigate future vulnerabilities. \n\n To prevent PDF documents from automatically being opened in a web\n browser, do the following:\n\n 1. \n 2. Open the Edit menu. \n 3. Choose the Preferences option. \n 4. Choose the Internet section. \n 5. Uncheck the \"Display PDF in browser\" checkbox. \n\n Do not access PDF documents from untrusted sources\n\n Do not open unfamiliar or unexpected PDF documents, particularly\n those hosted on websites or delivered as email attachments. Please\n see Cyber Security Tip ST04-010. \n\n\nIV. Please send\n email to \u003ccert@cert.org\u003e with \"TA10-103C Feedback VU#352598\" in\n the subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit \u003chttp://www.us-cert.gov/cas/signup.html\u003e. \n ____________________________________________________________________\n\n Produced 2010 by US-CERT, a government organization. \n\n Terms of use:\n\n \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\nRevision History\n\n April 13, 2010: Initial release\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.5 (GNU/Linux)\n\niQEVAwUBS8TuRj6pPKYJORa3AQJfzggAj8p3s/TrJT16ceFtRzLR31QBgRq6GxYr\nh8WnsGlj2WR71XjH219XaWx9Mj3KBWVxbAsNPmK0tEir7KA+n4DwZCewTDYRqfYs\n8N7G9MOI68Z87+7zBiZAo0j5/lQuxLWyTF9PqWbX8gCWLqJWW46cEZCqg7OGRbYt\nw8coxdMXU6tM3WGoWAIKwLRtpQUdubcITPTrE7RATyLJ1422B9dkTSeSCuHHZs5d\neXSPYzTQ1EOwHpuA5/a/or2SjeRPLQcpxb/8WKelSqwW3hpK4zviEnPt4cYyeNqW\nBQY06OQMTKch/nmniuEDuiwe69m0gTw7Tw2Dm6xrg6BLBy3A6GAwkQ==\n=CQ6i\n-----END PGP SIGNATURE-----\n. More\ndetails can be found at:\n\nhttp://www.adobe.com/support/security/bulletins/apsb10-09.html\n\n-- Disclosure Timeline:\n2010-02-18 - Vulnerability reported to vendor\n2010-04-13 - Coordinated public release of advisory\n\n-- Credit:\nThis vulnerability was discovered by:\n * Anonymous\n\n-- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents \na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201009-05\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: Adobe Reader: Multiple vulnerabilities\n Date: September 07, 2010\n Bugs: #297385, #306429, #313343, #322857\n ID: 201009-05\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities in Adobe Reader might result in the execution\nof arbitrary code or other attacks. For further\ninformation please consult the CVE entries and the Adobe Security\nBulletins referenced below. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Adobe Reader users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=app-text/acroread-9.3.4\"\n\nReferences\n==========\n\n [ 1 ] APSA10-01\n http://www.adobe.com/support/security/advisories/apsa10-01.html\n [ 2 ] APSB10-02\n http://www.adobe.com/support/security/bulletins/apsb10-02.html\n [ 3 ] APSB10-07\n http://www.adobe.com/support/security/bulletins/apsb10-07.html\n [ 4 ] APSB10-09\n http://www.adobe.com/support/security/bulletins/apsb10-09.html\n [ 5 ] APSB10-14\n http://www.adobe.com/support/security/bulletins/apsb10-14.html\n [ 6 ] APSB10-16\n http://www.adobe.com/support/security/bulletins/apsb10-16.html\n [ 7 ] CVE-2009-3953\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3953\n [ 8 ] CVE-2009-4324\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4324\n [ 9 ] CVE-2010-0186\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0186\n [ 10 ] CVE-2010-0188\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0188\n [ 11 ] CVE-2010-0190\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0190\n [ 12 ] CVE-2010-0191\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0191\n [ 13 ] CVE-2010-0192\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0192\n [ 14 ] CVE-2010-0193\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0193\n [ 15 ] CVE-2010-0194\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0194\n [ 16 ] CVE-2010-0195\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0195\n [ 17 ] CVE-2010-0196\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0196\n [ 18 ] CVE-2010-0197\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0197\n [ 19 ] CVE-2010-0198\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0198\n [ 20 ] CVE-2010-0199\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0199\n [ 21 ] CVE-2010-0201\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0201\n [ 22 ] CVE-2010-0202\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0202\n [ 23 ] CVE-2010-0203\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0203\n [ 24 ] CVE-2010-0204\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0204\n [ 25 ] CVE-2010-1241\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1241\n [ 26 ] CVE-2010-1285\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1285\n [ 27 ] CVE-2010-1295\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1295\n [ 28 ] CVE-2010-1297\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1297\n [ 29 ] CVE-2010-2168\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2168\n [ 30 ] CVE-2010-2201\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2201\n [ 31 ] CVE-2010-2202\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2202\n [ 32 ] CVE-2010-2203\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2203\n [ 33 ] CVE-2010-2204\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2204\n [ 34 ] CVE-2010-2205\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2205\n [ 35 ] CVE-2010-2206\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2206\n [ 36 ] CVE-2010-2207\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2207\n [ 37 ] CVE-2010-2208\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2208\n [ 38 ] CVE-2010-2209\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2209\n [ 39 ] CVE-2010-2210\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2210\n [ 40 ] CVE-2010-2211\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2211\n [ 41 ] CVE-2010-2212\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2212\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201009-05.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2010 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2010-0195"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "BID",
"id": "39417"
},
{
"db": "BID",
"id": "39329"
},
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "PACKETSTORM",
"id": "88345"
},
{
"db": "PACKETSTORM",
"id": "88333"
},
{
"db": "PACKETSTORM",
"id": "93607"
}
],
"trust": 3.24
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-42800",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-42800"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2010-0195",
"trust": 3.8
},
{
"db": "USCERT",
"id": "TA10-103C",
"trust": 2.7
},
{
"db": "VUPEN",
"id": "ADV-2010-0873",
"trust": 2.6
},
{
"db": "BID",
"id": "39329",
"trust": 2.1
},
{
"db": "BID",
"id": "39417",
"trust": 1.2
},
{
"db": "ZDI",
"id": "ZDI-10-071",
"trust": 1.1
},
{
"db": "USCERT",
"id": "SA10-103C",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-696",
"trust": 0.7
},
{
"db": "CERT/CC",
"id": "TA10-103C",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "88333",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-42800",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2010-0195",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "88345",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "93607",
"trust": 0.1
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "BID",
"id": "39417"
},
{
"db": "BID",
"id": "39329"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "PACKETSTORM",
"id": "88345"
},
{
"db": "PACKETSTORM",
"id": "88333"
},
{
"db": "PACKETSTORM",
"id": "93607"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"id": "VAR-201004-0124",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-42800"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T20:35:36.364000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "APSB10-09",
"trust": 1.5,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
},
{
"title": "APSB10-09",
"trust": 0.8,
"url": "http://www.adobe.com/jp/support/security/bulletins/apsb10-09.html"
},
{
"title": "RHSA-2010:0349",
"trust": 0.8,
"url": "https://rhn.redhat.com/errata/RHSA-2010-0349.html"
},
{
"title": "TA10-103C",
"trust": 0.8,
"url": "http://software.fujitsu.com/jp/security/vulnerabilities/ta10-103c.html"
},
{
"title": "Red Hat: Critical: acroread security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20100349 - Security Advisory"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-94",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
},
{
"trust": 2.6,
"url": "http://www.us-cert.gov/cas/techalerts/ta10-103c.html"
},
{
"trust": 2.6,
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/39329"
},
{
"trust": 1.2,
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a7420"
},
{
"trust": 0.9,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0195"
},
{
"trust": 0.8,
"url": "https://www.jpcert.or.jp/at/2010/at100009.txt"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnta10-103c/"
},
{
"trust": 0.8,
"url": "http://jvn.jp/tr/jvntr-2010-13/"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0195"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/39417"
},
{
"trust": 0.8,
"url": "http://www.us-cert.gov/cas/alerts/sa10-103c.html"
},
{
"trust": 0.8,
"url": "http://www.npa.go.jp/cyberpolice/index.html#topics"
},
{
"trust": 0.6,
"url": "http://www.adobe.com"
},
{
"trust": 0.3,
"url": "http://www.zerodayinitiative.com/advisories/zdi-10-071/"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0195"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/94.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2010:0349"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/techalerts/ta10-103c.html\u003e"
},
{
"trust": 0.1,
"url": "http://kb2.adobe.com/cps/504/cpsid_50431.html\u003e"
},
{
"trust": 0.1,
"url": "http://blogs.adobe.com/adobereader/2010/04/upcoming_adobe_reader_and_acro.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/signup.html\u003e."
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/legal.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/zdi-10-071"
},
{
"trust": 0.1,
"url": "http://secunia.com/"
},
{
"trust": 0.1,
"url": "http://twitter.com/thezdi"
},
{
"trust": 0.1,
"url": "http://www.tippingpoint.com"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com"
},
{
"trust": 0.1,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2203"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2009-4324"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2209"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0188"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0194"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0202"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0194"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0199"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/glsa/glsa-201009-05.xml"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2202"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2205"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2206"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0203"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0197"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2211"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1285"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2204"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0199"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0192"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0186"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0190"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0196"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-14.html"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-3953"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-4324"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0191"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0202"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0204"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0201"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2210"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0197"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0188"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0198"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0191"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-07.html"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1297"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1241"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1295"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0192"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/advisories/apsa10-01.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2009-3953"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0203"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2208"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0190"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0193"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0198"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2207"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0204"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2168"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0201"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0196"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2201"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-02.html"
},
{
"trust": 0.1,
"url": "http://www.adobe.com/support/security/bulletins/apsb10-16.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0193"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0186"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2212"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "BID",
"id": "39417"
},
{
"db": "BID",
"id": "39329"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "PACKETSTORM",
"id": "88345"
},
{
"db": "PACKETSTORM",
"id": "88333"
},
{
"db": "PACKETSTORM",
"id": "93607"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"db": "VULHUB",
"id": "VHN-42800"
},
{
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"db": "BID",
"id": "39417"
},
{
"db": "BID",
"id": "39329"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"db": "PACKETSTORM",
"id": "88345"
},
{
"db": "PACKETSTORM",
"id": "88333"
},
{
"db": "PACKETSTORM",
"id": "93607"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-04-13T00:00:00",
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"date": "2010-04-14T00:00:00",
"db": "VULHUB",
"id": "VHN-42800"
},
{
"date": "2010-04-14T00:00:00",
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"date": "2010-04-13T00:00:00",
"db": "BID",
"id": "39417"
},
{
"date": "2010-04-08T00:00:00",
"db": "BID",
"id": "39329"
},
{
"date": "2010-04-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"date": "2010-04-14T07:04:22",
"db": "PACKETSTORM",
"id": "88345"
},
{
"date": "2010-04-14T06:44:43",
"db": "PACKETSTORM",
"id": "88333"
},
{
"date": "2010-09-08T05:23:46",
"db": "PACKETSTORM",
"id": "93607"
},
{
"date": "2010-04-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"date": "2010-04-14T16:00:00.820000",
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-04-13T00:00:00",
"db": "ZDI",
"id": "ZDI-10-071"
},
{
"date": "2018-10-30T00:00:00",
"db": "VULHUB",
"id": "VHN-42800"
},
{
"date": "2018-10-30T00:00:00",
"db": "VULMON",
"id": "CVE-2010-0195"
},
{
"date": "2010-09-07T21:12:00",
"db": "BID",
"id": "39417"
},
{
"date": "2010-04-16T15:53:00",
"db": "BID",
"id": "39329"
},
{
"date": "2010-04-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-001351"
},
{
"date": "2010-04-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201004-248"
},
{
"date": "2024-11-21T01:11:44.543000",
"db": "NVD",
"id": "CVE-2010-0195"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "88333"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Adobe Reader and Acrobat Vulnerable to arbitrary code execution",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-001351"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "code injection",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201004-248"
}
],
"trust": 0.6
}
}
rhsa-2010_0349
Vulnerability from csaf_redhat
Published
2010-04-14 09:36
Modified
2024-11-14 10:48
Summary
Red Hat Security Advisory: acroread security update
Notes
Topic
Updated acroread packages that fix several security issues are now
available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise
Linux 5 Supplementary.
The Red Hat Security Response Team has rated this update as having critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Adobe Reader allows users to view and print documents in Portable Document
Format (PDF).
This update fixes several vulnerabilities in Adobe Reader. These
vulnerabilities are summarized on the Adobe Security Advisory APSB10-09
page listed in the References section. A specially-crafted PDF file could
cause Adobe Reader to crash or, potentially, execute arbitrary code as the
user running Adobe Reader when opened. (CVE-2010-0190, CVE-2010-0191,
CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196,
CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202,
CVE-2010-0203, CVE-2010-0204, CVE-2010-1241)
All Adobe Reader users should install these updated packages. They contain
Adobe Reader version 9.3.2, which is not vulnerable to these issues. All
running instances of Adobe Reader must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated acroread packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise\nLinux 5 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Adobe Reader allows users to view and print documents in Portable Document\nFormat (PDF).\n\nThis update fixes several vulnerabilities in Adobe Reader. These\nvulnerabilities are summarized on the Adobe Security Advisory APSB10-09\npage listed in the References section. A specially-crafted PDF file could\ncause Adobe Reader to crash or, potentially, execute arbitrary code as the\nuser running Adobe Reader when opened. (CVE-2010-0190, CVE-2010-0191,\nCVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196,\nCVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202,\nCVE-2010-0203, CVE-2010-0204, CVE-2010-1241)\n\nAll Adobe Reader users should install these updated packages. They contain\nAdobe Reader version 9.3.2, which is not vulnerable to these issues. All\nrunning instances of Adobe Reader must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0349",
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
},
{
"category": "external",
"summary": "579213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=579213"
},
{
"category": "external",
"summary": "581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0349.json"
}
],
"title": "Red Hat Security Advisory: acroread security update",
"tracking": {
"current_release_date": "2024-11-14T10:48:58+00:00",
"generator": {
"date": "2024-11-14T10:48:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2010:0349",
"initial_release_date": "2010-04-14T09:36:00+00:00",
"revision_history": [
{
"date": "2010-04-14T09:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-04-14T05:36:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:48:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "acroread-0:9.3.2-1.el4.i386",
"product": {
"name": "acroread-0:9.3.2-1.el4.i386",
"product_id": "acroread-0:9.3.2-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@9.3.2-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:9.3.2-1.el4.i386",
"product": {
"name": "acroread-plugin-0:9.3.2-1.el4.i386",
"product_id": "acroread-plugin-0:9.3.2-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@9.3.2-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:9.3.2-1.el5.i386",
"product": {
"name": "acroread-0:9.3.2-1.el5.i386",
"product_id": "acroread-0:9.3.2-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@9.3.2-1.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:9.3.2-1.el5.i386",
"product": {
"name": "acroread-plugin-0:9.3.2-1.el5.i386",
"product_id": "acroread-plugin-0:9.3.2-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@9.3.2-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-0:9.3.2-1.el5.i386"
},
"product_reference": "acroread-0:9.3.2-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:9.3.2-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-0:9.3.2-1.el5.i386"
},
"product_reference": "acroread-0:9.3.2-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:9.3.2-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
},
"product_reference": "acroread-plugin-0:9.3.2-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2010-0190",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0190"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0190",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0190"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0191",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a \"prefix protocol handler vulnerability.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0191"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0191",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0191"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0191",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0191"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0192",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0193 and CVE-2010-0196.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0192"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0192",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0192"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0193",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0196.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0193"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0193"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0194",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0194"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0194",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0194"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0194"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0195",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0195"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0195",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0195"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0196",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0193.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0196"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0196"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0197",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0201, and CVE-2010-0204.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0197"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0197"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0197",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0197"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0198",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0198"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0198"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0198",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0198"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0199",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0202, and CVE-2010-0203.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0199"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0199",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0199"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0201",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0201"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0201",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0201"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0201",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0201"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0202",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0203.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0202"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0202",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0202"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0202",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0202"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0203",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0203"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0203",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0203"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0203",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0203"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-0204",
"discovery_date": "2010-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "581417"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0201.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Multiple code execution flaws (APSB10-09)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0204"
},
{
"category": "external",
"summary": "RHBZ#581417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=581417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0204",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0204"
}
],
"release_date": "2010-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Multiple code execution flaws (APSB10-09)"
},
{
"cve": "CVE-2010-1241",
"discovery_date": "2010-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "579213"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Acroread: Heap-based overflow by opening a specially-crafted PDF file (FG-VD-10-005)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-1241"
},
{
"category": "external",
"summary": "RHBZ#579213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=579213"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-1241",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-1241"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1241",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1241"
}
],
"release_date": "2010-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-04-14T09:36:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0349"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-LACD:acroread-0:9.3.2-1.el4.i386",
"4AS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-0:9.3.2-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-0:9.3.2-1.el4.i386",
"4ES-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-0:9.3.2-1.el4.i386",
"4WS-LACD:acroread-plugin-0:9.3.2-1.el4.i386",
"5Client-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Client-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-0:9.3.2-1.el5.i386",
"5Server-Supplementary:acroread-plugin-0:9.3.2-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Acroread: Heap-based overflow by opening a specially-crafted PDF file (FG-VD-10-005)"
}
]
}
gsd-2010-0195
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2010-0195",
"description": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.",
"id": "GSD-2010-0195",
"references": [
"https://www.suse.com/security/cve/CVE-2010-0195.html",
"https://access.redhat.com/errata/RHSA-2010:0349"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2010-0195"
],
"details": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.",
"id": "GSD-2010-0195",
"modified": "2023-12-13T01:21:29.423026Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2010-0195",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2010-0873",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"name": "TA10-103C",
"refsource": "CERT",
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"name": "39329",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/39329"
},
{
"name": "oval:org.mitre.oval:def:7420",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
},
{
"name": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"refsource": "CONFIRM",
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2010-0195"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "TA10-103C",
"refsource": "CERT",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html"
},
{
"name": "ADV-2010-0873",
"refsource": "VUPEN",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/0873"
},
{
"name": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html"
},
{
"name": "39329",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/39329"
},
{
"name": "oval:org.mitre.oval:def:7420",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": true
}
},
"lastModifiedDate": "2018-10-30T16:25Z",
"publishedDate": "2010-04-14T16:00Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.