CERT-In Advisory
CIAD-2011-0056
Multiple Vulnerabilities in Adobe Acrobat/Reader
Original Issue Date: November 01, 2011
Severity Rating: High
Systems Affected
- Adobe Reader X (10.1) and earlier 10.x versions for Windows and Macintosh
- Adobe Reader 9.4.5 and earlier 9.x versions for Windows, Macintosh and UNIX
- Adobe Reader 8.3 and earlier 8.x versions for Windows and Macintosh
- Adobe Acrobat X (10.1) and earlier 10.x versions for Windows and Macintosh
- Adobe Acrobat 9.4.5 and earlier 9.x versions for Windows and Macintosh
- Adobe Acrobat 8.3 and earlier 8.x versions for Windows and Macintosh
Overview
Multiple vulnerabilities have been reported in Adobe Acrobat/ Reader, which could be exploited by remote attackers to compromise a vulnerable system.
Description
These issues are caused due to buffer overflow, heap overflow, stack overflow, memory leakage, use-after-free vulnerability, logic error and security bypass vulnerabilities.
These vulnerabilities could be exploited by remote attackers to cause the application to crash and could potentially take control of the affected system by tricking a user into visiting a specially crafted web page.
Solution
Apply appropriate patches as mentioned in the Adobe Security Bulletin:
http://www.adobe.com/support/security/bulletins/apsb11-24.html
Vendor Information
Adobe
http://www.adobe.com/support/security/bulletins/apsb11-24.html
References
ISS Xforce
http://xforce.iss.net/xforce/xfdb/69717
SecurityTracker
http://www.securitytracker.com/id/1026044
CVE Name
CVE-2011-1353
CVE-2011-2431
CVE-2011-2432
CVE-2011-2433
CVE-2011-2434
CVE-2011-2435
CVE-2011-2436
CVE-2011-2437
CVE-2011-2438
CVE-2011-2439
CVE-2011-2440
CVE-2011-2441
CVE-2011-2442
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|