RETIRED: Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities

Bugtraq ID:	37667
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 07 2010 12:00AM
Updated:	Jan 13 2010 03:21PM
Credit:	Secunia, Greg MacManus of iSIGHT Partners Labs, Core Audit Labs through iDefense, stratsec, Didier Stevens, Will Dormann of CERT, and Nicolas Joly of VUPEN Vulnerability Research Team
Vulnerable:	Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 9.1.1 Adobe Acrobat 9.2
Not Vulnerable:	Adobe Reader 9.3 Adobe Reader 8.2 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 8.2 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 8.2 Adobe Acrobat 9.3

RETIRED: Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities

Adobe Reader and Acrobat are prone to multiple vulnerabilities, include multiple code-execution vulnerabilities, a NULL-pointer-dereference vulnerability, and a script-injection vulnerability.

NOTE: This BID is being retired because the following records exist to better document the issues:

37756 Adobe Reader and Acrobat U3D Support Remote Code Execution Vulnerability
37757 Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability
37758 Adobe Reader and Acrobat U3D Remote Code Execution Vulnerability
37759 Adobe Reader and Acrobat Download Manager Remote Code Execution Vulnerability
37760 Adobe Reader and Acrobat Null Pointer Dereference Denial of Service Vulnerability
37761 Adobe Reader and Acrobat DLL Loading in 3D Remote Code Execution Vulnerability
37763 Adobe Reader and Acrobat Remote Security Bypass Vulnerability

RETIRED: Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities

Solution:
Updates are available. Please see the references for details.

RETIRED: Adobe Acrobat and Reader January 2010 Multiple Remote Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Adobe Security Advisory APSB10-02 (Adobe)