First published: Wed Jan 20 2010(Updated: )
Adobe Reader allows users to view and print documents in Portable Document<br>Format (PDF).<br>Adobe Reader 8.1.7 is vulnerable to critical security flaws and should no<br>longer be used. A specially-crafted PDF file could cause Adobe Reader to<br>crash or, potentially, execute arbitrary code as the user running Adobe<br>Reader when opened. (CVE-2009-4324, CVE-2009-3953, CVE-2009-3954,<br>CVE-2009-3955, CVE-2009-3959, CVE-2009-3956)<br>Adobe have discontinued support for Adobe Reader 8 for Linux. Adobe Reader<br>9 for Linux is not compatible with Red Hat Enterprise Linux 3. An<br>alternative PDF file viewer available in Red Hat Enterprise Linux 3 is<br>xpdf.<br>This update removes the acroread packages due to their known security<br>vulnerabilities.
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RHSA-2010:0060 is classified as critical due to vulnerabilities that could lead to crashes or arbitrary code execution.
To fix RHSA-2010:0060, it is recommended to upgrade from Adobe Reader 8.1.7 to a secure version that has patched the vulnerabilities.
RHSA-2010:0060 is associated with vulnerabilities that could allow for denial of service or remote code execution when handling specially-crafted PDF files.
RHSA-2010:0060 primarily affects Adobe Reader version 8.1.7.
The vulnerabilities in RHSA-2010:0060 can be exploited through crafted PDF documents that might crash Adobe Reader or execute malicious code.