Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2009-1856 (GCVE-0-2009-1856)
Vulnerability from cvelistv5
Published
2009-06-11 15:00
Modified
2024-08-07 05:27
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:27:54.732Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "35274",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35274"
},
{
"name": "ADV-2009-1547",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"name": "35655",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35655"
},
{
"name": "TA09-161A",
"tags": [
"third-party-advisory",
"x_refsource_CERT",
"x_transferred"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"name": "35734",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35734"
},
{
"name": "RHSA-2009:1109",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"name": "20090609 Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"name": "SUSE-SA:2009:035",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"name": "acrobat-reader-unspecified-overflow(51021)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"name": "1022361",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1022361"
},
{
"name": "GLSA-200907-06",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"name": "34580",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/34580"
},
{
"name": "35685",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "35294",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35294"
},
{
"name": "35496",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35496"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-06-09T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "35274",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35274"
},
{
"name": "ADV-2009-1547",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"name": "35655",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35655"
},
{
"name": "TA09-161A",
"tags": [
"third-party-advisory",
"x_refsource_CERT"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"name": "35734",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35734"
},
{
"name": "RHSA-2009:1109",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"name": "20090609 Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"name": "SUSE-SA:2009:035",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"name": "acrobat-reader-unspecified-overflow(51021)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"name": "1022361",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1022361"
},
{
"name": "GLSA-200907-06",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"name": "34580",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/34580"
},
{
"name": "35685",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "35294",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35294"
},
{
"name": "35496",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35496"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1856",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "35274",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35274"
},
{
"name": "ADV-2009-1547",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"name": "35655",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35655"
},
{
"name": "TA09-161A",
"refsource": "CERT",
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"name": "35734",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35734"
},
{
"name": "RHSA-2009:1109",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"name": "20090609 Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"name": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"refsource": "CONFIRM",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"name": "SUSE-SA:2009:035",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"name": "acrobat-reader-unspecified-overflow(51021)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"name": "1022361",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1022361"
},
{
"name": "GLSA-200907-06",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"name": "34580",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/34580"
},
{
"name": "35685",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "35294",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35294"
},
{
"name": "35496",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35496"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1856",
"datePublished": "2009-06-11T15:00:00",
"dateReserved": "2009-06-01T00:00:00",
"dateUpdated": "2024-08-07T05:27:54.732Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2009-1856\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2009-06-11T15:30:00.390\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.\"},{\"lang\":\"es\",\"value\":\"Un desbordamiento entero en Reader versi\u00f3n 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versi\u00f3n 8 y Acrobat versiones 8 anteriores a 8.1.6 de Adobe, y Reader versi\u00f3n 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegaci\u00f3n de servicio o posiblemente ejecutar c\u00f3digo arbitrario por medio de un archivo PDF que contiene par\u00e1metros en el filtro FlateDecode, lo que desencadena un desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-189\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FECFC942-4F04-420C-A9B4-AE0C0590317F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"AC8F85CD-8371-4B36-8D6A-8B2CA580631B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"FE88C274-CC72-4341-9BF6-1924054A12FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"507C02CF-7E81-4131-99DE-63E4EEC45F74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"47EBEF8E-3C53-41D5-B344-297ED7C432F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DC97A87-2652-4AD6-8E10-419A9AC9C245\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"DC0DF265-984D-462D-878E-612783BF0BFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"0335D33B-20D8-483F-AB5E-E2517F2F900D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"2341215F-97A7-40B6-B618-7FF022C7CFA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D75174C-EBF9-4117-9E66-80E847012853\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"D61F0564-59B9-4811-B7FD-BA044C6A94AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"9C9A3E43-7334-44B0-BF01-04BB19B6FE53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69B0305A-51D3-4E09-B96C-54B0ED921DA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"D3E43C1B-D76D-4486-AE7A-943D34D0A92C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9762FE57-837B-4FFA-9813-AC038450EB2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"F52F86E7-E845-48A5-9CC4-98E6DAA43C71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0055A38C-E421-40A1-8BC7-11856A20B8F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*\",\"matchCriteriaId\":\"60B53243-BF52-4028-8345-17636668A830\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"CC9D669B-7E9D-4F39-894A-D9438000F2B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"0D9CA54D-9D60-4064-B6AC-8CED8D064465\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"758CC9EE-8929-405B-A845-83BAAECCB2AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"55836D2A-487E-4B94-AC48-75A427D414F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E102FB9C-DE4B-481D-8F21-20143DDE3992\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"023C5C61-6629-480E-93AD-5F2691E51AFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC1BD70D-7A92-4309-A40C-9BD500997390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26AE76F7-D7F6-4AF2-A5C6-708B5642C288\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"0E16B425-B123-4BA3-AC93-5F400ED8F6B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"C6F47894-50FB-4192-A3CC-D944124F08A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"749FFB51-65D4-4A4B-95F3-742440276897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"5D6C9969-DFEF-4059-BE92-28969930EACA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8665E53-EC1E-4B95-9064-2565BC12113E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"EA23452E-F5C7-4756-8245-1F398BA78E9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24218FDA-F9DA-465A-B5D5-76A55C7EE04E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"21113403-CA7D-4082-9516-C672C9A487C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"8F04372D-60A1-4407-8CF1-113262846783\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*\",\"matchCriteriaId\":\"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2C5F1C5-85CD-47B9-897F-E51D6902AF72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0E190FF-3EBC-44AB-8072-4D964E843E8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*\",\"matchCriteriaId\":\"56691A9A-4C98-4D5F-9734-B225F534CC58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"43F1C1B8-20B5-4534-A753-19EC415D0E6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AA53564-9ACD-4CFB-9AAC-A77440026A57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"74B6AF0A-DBEA-4EBD-A528-80AE31386375\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FF485FB-3317-4C89-B636-F22FF19B00BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*\",\"matchCriteriaId\":\"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24262AFA-2EC8-479E-8922-36DB4243E404\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E62096-08B2-4722-A492-11E9A441E85B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5370AC6-90EE-48EA-8DBD-54002B102F7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C36D10A8-D211-437D-98D8-9029D0A9CF8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA55D00C-3629-48E4-8699-F62B8D703E02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"623324C2-C8B5-4C3C-9C10-9677D5A6740A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634396D6-4ED6-4F4D-9458-396373489589\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5849F63A-4E06-411F-95F0-A40B88F0C609\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADB421CD-85DE-4495-93B7-46708449AE27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"996EB48E-D2A8-49E4-915A-EBDE26A9FB94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97E20936-EE31-4CEB-A710-3165A28BAD69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5BEA847-A71E-4336-AB67-B3C38847C1C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6CDBD40-C67F-4F59-88CF-5C0953056420\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D198253-0E52-4E7F-AA01-CA82B96CD5BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39F6994B-6969-485B-9286-2592B11A47BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC533775-B52E-43F0-BF19-1473BE36232D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F234ECA6-375B-493B-A659-F013DAEE5B29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F25C9167-C6D4-4264-9197-50878EDA2D96\"}]}]}],\"references\":[{\"url\":\"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/34580\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35496\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35655\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35685\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35734\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200907-06.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1022361\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.adobe.com/support/security/bulletins/apsb09-07.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1109.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/35274\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/35294\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA09-161A.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/1547\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/51021\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/34580\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35496\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35685\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/35734\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200907-06.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1022361\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.adobe.com/support/security/bulletins/apsb09-07.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1109.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/35274\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/35294\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA09-161A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/1547\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/51021\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2009:1109
Vulnerability from csaf_redhat
Published
2009-06-17 09:16
Modified
2025-11-08 03:24
Summary
Red Hat Security Advisory: acroread security update
Notes
Topic
Updated acroread packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4
Extras, and Red Hat Enterprise Linux 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Adobe Reader allows users to view and print documents in Portable Document
Format (PDF).
Multiple security flaws were discovered in Adobe Reader. A specially
crafted PDF file could cause Adobe Reader to crash or, potentially, execute
arbitrary code as the user running Adobe Reader when opened.
(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,
CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,
CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)
All Adobe Reader users should install these updated packages. They contain
Adobe Reader version 8.1.6, which is not vulnerable to these issues. All
running instances of Adobe Reader must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated acroread packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4\nExtras, and Red Hat Enterprise Linux 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Adobe Reader allows users to view and print documents in Portable Document\nFormat (PDF).\n\nMultiple security flaws were discovered in Adobe Reader. A specially\ncrafted PDF file could cause Adobe Reader to crash or, potentially, execute\narbitrary code as the user running Adobe Reader when opened.\n(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,\nCVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,\nCVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)\n\nAll Adobe Reader users should install these updated packages. They contain\nAdobe Reader version 8.1.6, which is not vulnerable to these issues. All\nrunning instances of Adobe Reader must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1109",
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"category": "external",
"summary": "505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1109.json"
}
],
"title": "Red Hat Security Advisory: acroread security update",
"tracking": {
"current_release_date": "2025-11-08T03:24:10+00:00",
"generator": {
"date": "2025-11-08T03:24:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1109",
"initial_release_date": "2009-06-17T09:16:00+00:00",
"revision_history": [
{
"date": "2009-06-17T09:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-06-17T05:16:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:24:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3 Extras",
"product": {
"name": "Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.i386",
"product_id": "acroread-plugin-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.i386",
"product": {
"name": "acroread-0:8.1.6-1.i386",
"product_id": "acroread-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_id": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-0:8.1.6-1.el4.i386",
"product_id": "acroread-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_id": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-2.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-0:8.1.6-2.el5.i386",
"product_id": "acroread-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-2.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0198",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0198"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0198"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0509",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0509"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0509",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0509"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0510",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0510"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0510",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0510"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0511",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0511"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0511",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0512",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0512"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0512",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0888",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0888"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0889",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0889"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0889"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1855",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1855"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1855",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1856",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1856"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1857",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1857"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1857",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1858",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1858"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1859",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1859"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1859",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1861",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1861"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1861"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-2028",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to \"Adobe internally discovered issues.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2028"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2028",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
}
]
}
rhsa-2009_1109
Vulnerability from csaf_redhat
Published
2009-06-17 09:16
Modified
2024-11-14 10:46
Summary
Red Hat Security Advisory: acroread security update
Notes
Topic
Updated acroread packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4
Extras, and Red Hat Enterprise Linux 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Adobe Reader allows users to view and print documents in Portable Document
Format (PDF).
Multiple security flaws were discovered in Adobe Reader. A specially
crafted PDF file could cause Adobe Reader to crash or, potentially, execute
arbitrary code as the user running Adobe Reader when opened.
(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,
CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,
CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)
All Adobe Reader users should install these updated packages. They contain
Adobe Reader version 8.1.6, which is not vulnerable to these issues. All
running instances of Adobe Reader must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated acroread packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4\nExtras, and Red Hat Enterprise Linux 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Adobe Reader allows users to view and print documents in Portable Document\nFormat (PDF).\n\nMultiple security flaws were discovered in Adobe Reader. A specially\ncrafted PDF file could cause Adobe Reader to crash or, potentially, execute\narbitrary code as the user running Adobe Reader when opened.\n(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,\nCVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,\nCVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)\n\nAll Adobe Reader users should install these updated packages. They contain\nAdobe Reader version 8.1.6, which is not vulnerable to these issues. All\nrunning instances of Adobe Reader must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1109",
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"category": "external",
"summary": "505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1109.json"
}
],
"title": "Red Hat Security Advisory: acroread security update",
"tracking": {
"current_release_date": "2024-11-14T10:46:22+00:00",
"generator": {
"date": "2024-11-14T10:46:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2009:1109",
"initial_release_date": "2009-06-17T09:16:00+00:00",
"revision_history": [
{
"date": "2009-06-17T09:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-06-17T05:16:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T10:46:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3 Extras",
"product": {
"name": "Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.i386",
"product_id": "acroread-plugin-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.i386",
"product": {
"name": "acroread-0:8.1.6-1.i386",
"product_id": "acroread-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_id": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-0:8.1.6-1.el4.i386",
"product_id": "acroread-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_id": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-2.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-0:8.1.6-2.el5.i386",
"product_id": "acroread-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-2.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0198",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0198"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0198"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0509",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0509"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0509",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0509"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0510",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0510"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0510",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0510"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0511",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0511"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0511",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0512",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0512"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0512",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0888",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0888"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0889",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0889"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0889"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1855",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1855"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1855",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1856",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1856"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1857",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1857"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1857",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1858",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1858"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1859",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1859"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1859",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1861",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1861"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1861"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-2028",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to \"Adobe internally discovered issues.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2028"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2028",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
}
]
}
rhsa-2009:1109
Vulnerability from csaf_redhat
Published
2009-06-17 09:16
Modified
2025-11-08 03:24
Summary
Red Hat Security Advisory: acroread security update
Notes
Topic
Updated acroread packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4
Extras, and Red Hat Enterprise Linux 5 Supplementary.
This update has been rated as having critical security impact by the Red
Hat Security Response Team.
Details
Adobe Reader allows users to view and print documents in Portable Document
Format (PDF).
Multiple security flaws were discovered in Adobe Reader. A specially
crafted PDF file could cause Adobe Reader to crash or, potentially, execute
arbitrary code as the user running Adobe Reader when opened.
(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,
CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,
CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)
All Adobe Reader users should install these updated packages. They contain
Adobe Reader version 8.1.6, which is not vulnerable to these issues. All
running instances of Adobe Reader must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated acroread packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4\nExtras, and Red Hat Enterprise Linux 5 Supplementary.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Adobe Reader allows users to view and print documents in Portable Document\nFormat (PDF).\n\nMultiple security flaws were discovered in Adobe Reader. A specially\ncrafted PDF file could cause Adobe Reader to crash or, potentially, execute\narbitrary code as the user running Adobe Reader when opened.\n(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,\nCVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,\nCVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028)\n\nAll Adobe Reader users should install these updated packages. They contain\nAdobe Reader version 8.1.6, which is not vulnerable to these issues. All\nrunning instances of Adobe Reader must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1109",
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"category": "external",
"summary": "505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1109.json"
}
],
"title": "Red Hat Security Advisory: acroread security update",
"tracking": {
"current_release_date": "2025-11-08T03:24:10+00:00",
"generator": {
"date": "2025-11-08T03:24:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1109",
"initial_release_date": "2009-06-17T09:16:00+00:00",
"revision_history": [
{
"date": "2009-06-17T09:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-06-17T05:16:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:24:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3 Extras",
"product": {
"name": "Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 4 Extras",
"product": {
"name": "Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product": {
"name": "Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.i386",
"product_id": "acroread-plugin-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.i386",
"product": {
"name": "acroread-0:8.1.6-1.i386",
"product_id": "acroread-0:8.1.6-1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_id": "acroread-plugin-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-1.el4.i386",
"product": {
"name": "acroread-0:8.1.6-1.el4.i386",
"product_id": "acroread-0:8.1.6-1.el4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-1.el4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_id": "acroread-plugin-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread-plugin@8.1.6-2.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "acroread-0:8.1.6-2.el5.i386",
"product": {
"name": "acroread-0:8.1.6-2.el5.i386",
"product_id": "acroread-0:8.1.6-2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/acroread@8.1.6-2.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
"product_id": "3AS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Desktop version 3 Extras",
"product_id": "3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
"product_id": "3ES-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-0:8.1.6-1.i386"
},
"product_reference": "acroread-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
"product_id": "3WS-LACD:acroread-plugin-0:8.1.6-1.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.i386",
"relates_to_product_reference": "3WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
"product_id": "4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4AS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras",
"product_id": "4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4Desktop-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
"product_id": "4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4ES-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
"product_id": "4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-1.el4.i386",
"relates_to_product_reference": "4WS-LACD"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Client-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "acroread-plugin-0:8.1.6-2.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
},
"product_reference": "acroread-plugin-0:8.1.6-2.el5.i386",
"relates_to_product_reference": "5Server-Supplementary"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0198",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0198"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0198"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0198"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0509",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0509"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0509",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0509"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0509"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0510",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0510"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0510",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0510"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0510"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0511",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0511"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0511",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0511"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0512",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0512"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0512",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0512"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0888",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0888"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0888"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-0889",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-0889"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0889"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0889"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1855",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1855"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1855",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1855"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1856",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1856"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1857",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1857"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1857",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1857"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1858",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1858"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1858"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1859",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1859"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1859",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1859"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-1861",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-1861"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1861"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1861"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
},
{
"cve": "CVE-2009-2028",
"discovery_date": "2009-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "505049"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to \"Adobe internally discovered issues.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2009-2028"
},
{
"category": "external",
"summary": "RHBZ#505049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=505049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2009-2028",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2028"
}
],
"release_date": "2009-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-06-17T09:16:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1109"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"3AS-LACD:acroread-0:8.1.6-1.i386",
"3AS-LACD:acroread-plugin-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-0:8.1.6-1.i386",
"3Desktop-LACD:acroread-plugin-0:8.1.6-1.i386",
"3ES-LACD:acroread-0:8.1.6-1.i386",
"3ES-LACD:acroread-plugin-0:8.1.6-1.i386",
"3WS-LACD:acroread-0:8.1.6-1.i386",
"3WS-LACD:acroread-plugin-0:8.1.6-1.i386",
"4AS-LACD:acroread-0:8.1.6-1.el4.i386",
"4AS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-0:8.1.6-1.el4.i386",
"4Desktop-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-0:8.1.6-1.el4.i386",
"4ES-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-0:8.1.6-1.el4.i386",
"4WS-LACD:acroread-plugin-0:8.1.6-1.el4.i386",
"5Client-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Client-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-0:8.1.6-2.el5.i386",
"5Server-Supplementary:acroread-plugin-0:8.1.6-2.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "acroread: multiple security fixes in version 8.1.6 (APSB09-07)"
}
]
}
fkie_cve-2009-1856
Vulnerability from fkie_nvd
Published
2009-06-11 15:30
Modified
2025-04-09 00:30
Severity ?
Summary
Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807 | ||
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html | ||
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html | ||
| cve@mitre.org | http://secunia.com/advisories/34580 | Vendor Advisory | |
| cve@mitre.org | http://secunia.com/advisories/35496 | Vendor Advisory | |
| cve@mitre.org | http://secunia.com/advisories/35655 | Vendor Advisory | |
| cve@mitre.org | http://secunia.com/advisories/35685 | Vendor Advisory | |
| cve@mitre.org | http://secunia.com/advisories/35734 | Vendor Advisory | |
| cve@mitre.org | http://security.gentoo.org/glsa/glsa-200907-06.xml | ||
| cve@mitre.org | http://securitytracker.com/id?1022361 | ||
| cve@mitre.org | http://www.adobe.com/support/security/bulletins/apsb09-07.html | Patch, Vendor Advisory | |
| cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2009-1109.html | ||
| cve@mitre.org | http://www.securityfocus.com/bid/35274 | ||
| cve@mitre.org | http://www.securityfocus.com/bid/35294 | ||
| cve@mitre.org | http://www.us-cert.gov/cas/techalerts/TA09-161A.html | US Government Resource | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2009/1547 | Patch, Vendor Advisory | |
| cve@mitre.org | https://exchange.xforce.ibmcloud.com/vulnerabilities/51021 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/34580 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/35496 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/35655 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/35685 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/35734 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200907-06.xml | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://securitytracker.com/id?1022361 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.adobe.com/support/security/bulletins/apsb09-07.html | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2009-1109.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/35274 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/35294 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.us-cert.gov/cas/techalerts/TA09-161A.html | US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/1547 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/51021 |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| adobe | acrobat | 7.0 | |
| adobe | acrobat | 7.0 | |
| adobe | acrobat | 7.0 | |
| adobe | acrobat | 7.0.1 | |
| adobe | acrobat | 7.0.1 | |
| adobe | acrobat | 7.0.1 | |
| adobe | acrobat | 7.0.2 | |
| adobe | acrobat | 7.0.2 | |
| adobe | acrobat | 7.0.2 | |
| adobe | acrobat | 7.0.3 | |
| adobe | acrobat | 7.0.3 | |
| adobe | acrobat | 7.0.3 | |
| adobe | acrobat | 7.0.4 | |
| adobe | acrobat | 7.0.4 | |
| adobe | acrobat | 7.0.4 | |
| adobe | acrobat | 7.0.5 | |
| adobe | acrobat | 7.0.5 | |
| adobe | acrobat | 7.0.5 | |
| adobe | acrobat | 7.0.6 | |
| adobe | acrobat | 7.0.6 | |
| adobe | acrobat | 7.0.6 | |
| adobe | acrobat | 7.0.7 | |
| adobe | acrobat | 7.0.7 | |
| adobe | acrobat | 7.0.7 | |
| adobe | acrobat | 7.0.8 | |
| adobe | acrobat | 7.0.8 | |
| adobe | acrobat | 7.0.8 | |
| adobe | acrobat | 7.0.8 | |
| adobe | acrobat | 7.0.9 | |
| adobe | acrobat | 7.0.9 | |
| adobe | acrobat | 7.1 | |
| adobe | acrobat | 7.1 | |
| adobe | acrobat | 7.1 | |
| adobe | acrobat | 7.1.0 | |
| adobe | acrobat | 7.1.1 | |
| adobe | acrobat | 7.1.1 | |
| adobe | acrobat | 8.0 | |
| adobe | acrobat | 8.0 | |
| adobe | acrobat | 8.0 | |
| adobe | acrobat | 8.1 | |
| adobe | acrobat | 8.1 | |
| adobe | acrobat | 8.1.1 | |
| adobe | acrobat | 8.1.1 | |
| adobe | acrobat | 8.1.1 | |
| adobe | acrobat | 8.1.2 | |
| adobe | acrobat | 8.1.2 | |
| adobe | acrobat | 8.1.2 | |
| adobe | acrobat | 8.1.2 | |
| adobe | acrobat | 8.1.3 | |
| adobe | acrobat | 8.1.3 | |
| adobe | acrobat | 8.1.3 | |
| adobe | acrobat | 8.1.4 | |
| adobe | acrobat | 8.1.4 | |
| adobe | acrobat | 8.1.4 | |
| adobe | acrobat | 9 | |
| adobe | acrobat | 9.0 | |
| adobe | acrobat | 9.0 | |
| adobe | acrobat | 9.0.0 | |
| adobe | acrobat | 9.1 | |
| adobe | acrobat | 9.1 | |
| adobe | acrobat_reader | 7.0 | |
| adobe | acrobat_reader | 7.0.1 | |
| adobe | acrobat_reader | 7.0.2 | |
| adobe | acrobat_reader | 7.0.3 | |
| adobe | acrobat_reader | 7.0.4 | |
| adobe | acrobat_reader | 7.0.5 | |
| adobe | acrobat_reader | 7.0.6 | |
| adobe | acrobat_reader | 7.0.7 | |
| adobe | acrobat_reader | 7.0.8 | |
| adobe | acrobat_reader | 7.0.9 | |
| adobe | acrobat_reader | 7.1 | |
| adobe | acrobat_reader | 7.1.1 | |
| adobe | acrobat_reader | 8.0 | |
| adobe | acrobat_reader | 8.1 | |
| adobe | acrobat_reader | 8.1.1 | |
| adobe | acrobat_reader | 8.1.2 | |
| adobe | acrobat_reader | 8.1.2 | |
| adobe | acrobat_reader | 8.1.3 | |
| adobe | acrobat_reader | 8.1.4 | |
| adobe | acrobat_reader | 8.1.5 | |
| adobe | acrobat_reader | 9 | |
| adobe | acrobat_reader | 9.1 | |
| adobe | acrobat_reader | 9.1.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FECFC942-4F04-420C-A9B4-AE0C0590317F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
"matchCriteriaId": "AC8F85CD-8371-4B36-8D6A-8B2CA580631B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
"matchCriteriaId": "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
"matchCriteriaId": "FE88C274-CC72-4341-9BF6-1924054A12FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "507C02CF-7E81-4131-99DE-63E4EEC45F74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
"matchCriteriaId": "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
"matchCriteriaId": "47EBEF8E-3C53-41D5-B344-297ED7C432F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "1DC97A87-2652-4AD6-8E10-419A9AC9C245",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
"matchCriteriaId": "DC0DF265-984D-462D-878E-612783BF0BFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
"matchCriteriaId": "0335D33B-20D8-483F-AB5E-E2517F2F900D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
"matchCriteriaId": "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
"matchCriteriaId": "2341215F-97A7-40B6-B618-7FF022C7CFA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "2D75174C-EBF9-4117-9E66-80E847012853",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
"matchCriteriaId": "D61F0564-59B9-4811-B7FD-BA044C6A94AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
"matchCriteriaId": "9C9A3E43-7334-44B0-BF01-04BB19B6FE53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "69B0305A-51D3-4E09-B96C-54B0ED921DA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
"matchCriteriaId": "D3E43C1B-D76D-4486-AE7A-943D34D0A92C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
"matchCriteriaId": "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "9762FE57-837B-4FFA-9813-AC038450EB2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
"matchCriteriaId": "F52F86E7-E845-48A5-9CC4-98E6DAA43C71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
"matchCriteriaId": "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "0055A38C-E421-40A1-8BC7-11856A20B8F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
"matchCriteriaId": "60B53243-BF52-4028-8345-17636668A830",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
"matchCriteriaId": "CC9D669B-7E9D-4F39-894A-D9438000F2B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
"matchCriteriaId": "0D9CA54D-9D60-4064-B6AC-8CED8D064465",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "758CC9EE-8929-405B-A845-83BAAECCB2AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
"matchCriteriaId": "55836D2A-487E-4B94-AC48-75A427D414F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E102FB9C-DE4B-481D-8F21-20143DDE3992",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
"matchCriteriaId": "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "023C5C61-6629-480E-93AD-5F2691E51AFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BC1BD70D-7A92-4309-A40C-9BD500997390",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "26AE76F7-D7F6-4AF2-A5C6-708B5642C288",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
"matchCriteriaId": "0E16B425-B123-4BA3-AC93-5F400ED8F6B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
"matchCriteriaId": "C6F47894-50FB-4192-A3CC-D944124F08A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "749FFB51-65D4-4A4B-95F3-742440276897",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "5D6C9969-DFEF-4059-BE92-28969930EACA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
"matchCriteriaId": "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "EA23452E-F5C7-4756-8245-1F398BA78E9F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "24218FDA-F9DA-465A-B5D5-76A55C7EE04E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
"matchCriteriaId": "21113403-CA7D-4082-9516-C672C9A487C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
"matchCriteriaId": "8F04372D-60A1-4407-8CF1-113262846783",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
"matchCriteriaId": "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "E2C5F1C5-85CD-47B9-897F-E51D6902AF72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
"matchCriteriaId": "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
"matchCriteriaId": "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E0E190FF-3EBC-44AB-8072-4D964E843E8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
"matchCriteriaId": "56691A9A-4C98-4D5F-9734-B225F534CC58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
"matchCriteriaId": "43F1C1B8-20B5-4534-A753-19EC415D0E6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
"matchCriteriaId": "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5AA53564-9ACD-4CFB-9AAC-A77440026A57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
"matchCriteriaId": "74B6AF0A-DBEA-4EBD-A528-80AE31386375",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5FF485FB-3317-4C89-B636-F22FF19B00BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
"matchCriteriaId": "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "24262AFA-2EC8-479E-8922-36DB4243E404",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E62096-08B2-4722-A492-11E9A441E85B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C5370AC6-90EE-48EA-8DBD-54002B102F7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C36D10A8-D211-437D-98D8-9029D0A9CF8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "BA55D00C-3629-48E4-8699-F62B8D703E02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "623324C2-C8B5-4C3C-9C10-9677D5A6740A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "634396D6-4ED6-4F4D-9458-396373489589",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5849F63A-4E06-411F-95F0-A40B88F0C609",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "ADB421CD-85DE-4495-93B7-46708449AE27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "996EB48E-D2A8-49E4-915A-EBDE26A9FB94",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "97E20936-EE31-4CEB-A710-3165A28BAD69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C5BEA847-A71E-4336-AB67-B3C38847C1C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
"matchCriteriaId": "B6CDBD40-C67F-4F59-88CF-5C0953056420",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "4D198253-0E52-4E7F-AA01-CA82B96CD5BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "39F6994B-6969-485B-9286-2592B11A47BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FC533775-B52E-43F0-BF19-1473BE36232D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
"matchCriteriaId": "F234ECA6-375B-493B-A659-F013DAEE5B29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F25C9167-C6D4-4264-9197-50878EDA2D96",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
},
{
"lang": "es",
"value": "Un desbordamiento entero en Reader versi\u00f3n 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versi\u00f3n 8 y Acrobat versiones 8 anteriores a 8.1.6 de Adobe, y Reader versi\u00f3n 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegaci\u00f3n de servicio o posiblemente ejecutar c\u00f3digo arbitrario por medio de un archivo PDF que contiene par\u00e1metros en el filtro FlateDecode, lo que desencadena un desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria."
}
],
"id": "CVE-2009-1856",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2009-06-11T15:30:00.390",
"references": [
{
"source": "cve@mitre.org",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/34580"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35496"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35655"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35685"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35734"
},
{
"source": "cve@mitre.org",
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"source": "cve@mitre.org",
"url": "http://securitytracker.com/id?1022361"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/35274"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/35294"
},
{
"source": "cve@mitre.org",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/34580"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35496"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35655"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35685"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35734"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1022361"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/35274"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/35294"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-189"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
gsd-2009-1856
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2009-1856",
"description": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"id": "GSD-2009-1856",
"references": [
"https://www.suse.com/security/cve/CVE-2009-1856.html",
"https://access.redhat.com/errata/RHSA-2009:1109"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2009-1856"
],
"details": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"id": "GSD-2009-1856",
"modified": "2023-12-13T01:19:47.801811Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1856",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "35274",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35274"
},
{
"name": "ADV-2009-1547",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"name": "35655",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35655"
},
{
"name": "TA09-161A",
"refsource": "CERT",
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"name": "35734",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35734"
},
{
"name": "RHSA-2009:1109",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"name": "20090609 Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"name": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"refsource": "CONFIRM",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"name": "SUSE-SA:2009:035",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"name": "acrobat-reader-unspecified-overflow(51021)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"name": "1022361",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1022361"
},
{
"name": "GLSA-200907-06",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"name": "34580",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/34580"
},
{
"name": "35685",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "35294",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35294"
},
{
"name": "35496",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35496"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1856"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"name": "1022361",
"refsource": "SECTRACK",
"tags": [],
"url": "http://securitytracker.com/id?1022361"
},
{
"name": "35274",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/35274"
},
{
"name": "ADV-2009-1547",
"refsource": "VUPEN",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/1547"
},
{
"name": "34580",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/34580"
},
{
"name": "20090609 Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability",
"refsource": "IDEFENSE",
"tags": [],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"name": "35294",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/35294"
},
{
"name": "TA09-161A",
"refsource": "CERT",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"name": "RHSA-2009:1109",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"name": "35496",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35496"
},
{
"name": "SUSE-SR:2009:012",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "35734",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35734"
},
{
"name": "35655",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35655"
},
{
"name": "35685",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35685"
},
{
"name": "GLSA-200907-06",
"refsource": "GENTOO",
"tags": [],
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"name": "SUSE-SA:2009:035",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"name": "acrobat-reader-unspecified-overflow(51021)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": true
}
},
"lastModifiedDate": "2017-08-17T01:30Z",
"publishedDate": "2009-06-11T15:30Z"
}
}
}
CERTA-2009-AVI-224
Vulnerability from certfr_avis
Plusieurs vulnérabilités dans Adobe Reader et Adobe Acrobat permettent à une personne distante malintentionnée de provoquer un déni de service et d'exécuter du code arbitraire.
Description
De multiples vulnérabilités ont été découvertes dans Adobe Reader et Abode Acrobat et permettent à une personne distante de provoquer un déni de service et d'exécuter du code arbitraire via des dépassements d'entier, de pile ou de tas et des corruptions de la mémoire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Acrobat Standard, Pro et Pro Extended 9.1.1 et les versions ant\u00e9rieures.",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Reader 9.1.1 et les versions ant\u00e9rieures ;",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Adobe Reader et\nAbode Acrobat et permettent \u00e0 une personne distante de provoquer un d\u00e9ni\nde service et d\u0027ex\u00e9cuter du code arbitraire via des d\u00e9passements\nd\u0027entier, de pile ou de tas et des corruptions de la m\u00e9moire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0888"
},
{
"name": "CVE-2009-1857",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1857"
},
{
"name": "CVE-2009-0511",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0511"
},
{
"name": "CVE-2009-1855",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1855"
},
{
"name": "CVE-2009-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0198"
},
{
"name": "CVE-2009-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1856"
},
{
"name": "CVE-2009-1859",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1859"
},
{
"name": "CVE-2009-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1861"
},
{
"name": "CVE-2009-0512",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0512"
},
{
"name": "CVE-2009-0510",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0510"
},
{
"name": "CVE-2009-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1858"
},
{
"name": "CVE-2009-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0889"
},
{
"name": "CVE-2009-0509",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0509"
}
],
"initial_release_date": "2009-06-10T00:00:00",
"last_revision_date": "2009-06-10T00:00:00",
"links": [],
"reference": "CERTA-2009-AVI-224",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-06-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans Adobe Reader et Adobe Acrobat permettent \u00e0\nune personne distante malintentionn\u00e9e de provoquer un d\u00e9ni de service et\nd\u0027ex\u00e9cuter du code arbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Reader et Acrobat",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB09-07 du 09 juin 2009",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
}
]
}
ghsa-888m-whhh-898w
Vulnerability from github
Published
2022-05-02 03:29
Modified
2022-05-02 03:29
VLAI Severity ?
Details
Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.
{
"affected": [],
"aliases": [
"CVE-2009-1856"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2009-06-11T15:30:00Z",
"severity": "HIGH"
},
"details": "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.",
"id": "GHSA-888m-whhh-898w",
"modified": "2022-05-02T03:29:27Z",
"published": "2022-05-02T03:29:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1856"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021"
},
{
"type": "WEB",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/34580"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/35496"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/35655"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/35685"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/35734"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200907-06.xml"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1022361"
},
{
"type": "WEB",
"url": "http://www.adobe.com/support/security/bulletins/apsb09-07.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1109.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/35274"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/35294"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA09-161A.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2009/1547"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…