RETIRED: Adobe Acrobat and Reader 9.3.4 Multiple Remote Vulnerabilities

Bugtraq ID:	43621
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 30 2010 12:00AM
Updated:	Jun 20 2013 09:38AM
Credit:	Adobe
Vulnerable:	Adobe Reader 9.3.4 Adobe Reader 9.3.3 Adobe Reader 9.3.2 Adobe Reader 9.3.1 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.2.4 Adobe Reader 8.2.3 Adobe Reader 8.2.2 Adobe Reader 8.2.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 7.1.4 Adobe Reader 7.1.3 Adobe Reader 7.1.2 Adobe Reader 7.1.1 Adobe Reader 7.0.9 Adobe Reader 7.0.8 Adobe Reader 7.0.7 Adobe Reader 7.0.6 Adobe Reader 7.0.5 Adobe Reader 7.0.4 Adobe Reader 7.0.3 Adobe Reader 7.0.2 Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9 Adobe Reader 8.2 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 7.1 Adobe Acrobat Standard 9.3.4 Adobe Acrobat Standard 9.3.3 Adobe Acrobat Standard 9.3.2 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.2.4 Adobe Acrobat Standard 8.2.2 Adobe Acrobat Standard 8.2.1 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 7.1.4 Adobe Acrobat Standard 7.1.3 Adobe Acrobat Standard 7.1.1 Adobe Acrobat Standard 7.0.8 Adobe Acrobat Standard 7.0.7 Adobe Acrobat Standard 7.0.6 Adobe Acrobat Standard 7.0.5 Adobe Acrobat Standard 7.0.4 Adobe Acrobat Standard 7.0.3 Adobe Acrobat Standard 7.0.2 Adobe Acrobat Standard 7.0.1 Adobe Acrobat Standard 7.0 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.2 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 7.1 Adobe Acrobat Professional 9.3.4 Adobe Acrobat Professional 9.3.3 Adobe Acrobat Professional 9.3.2 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.2.4 Adobe Acrobat Professional 8.2.2 Adobe Acrobat Professional 8.2.1 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 7.1.4 Adobe Acrobat Professional 7.1.3 Adobe Acrobat Professional 7.1.1 Adobe Acrobat Professional 7.0.9 Adobe Acrobat Professional 7.0.8 Adobe Acrobat Professional 7.0.7 Adobe Acrobat Professional 7.0.6 Adobe Acrobat Professional 7.0.5 Adobe Acrobat Professional 7.0.4 Adobe Acrobat Professional 7.0.3 Adobe Acrobat Professional 7.0.2 Adobe Acrobat Professional 7.0.1 Adobe Acrobat Professional 7.0 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.2 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 7.1 Adobe Acrobat 9.3.3 Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.1 Adobe Acrobat 9.1.1 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.3 Adobe Acrobat 8.2.2 Adobe Acrobat 8.1.8 Adobe Acrobat 7.1.2 Adobe Acrobat 7.0.9 Adobe Acrobat 7.0.3 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0 Adobe Acrobat 9.3 Adobe Acrobat 9.2
Not Vulnerable:

RETIRED: Adobe Acrobat and Reader 9.3.4 Multiple Remote Vulnerabilities

On October 5, 2010, Adobe will be releasing a security advisory addressing multiple vulnerabilities in Acrobat and Reader. Adobe rates these vulnerabilities as critical.

Adobe Reader and Acrobat versions prior to and including 9.3.4 and 8.2.4 are affected.

This BID is being retired. The following individual BIDs exist to better document the issues:

43737 Adobe Acrobat and Reader NULL Pointer Dereference Denial of Service Vulnerability
43735 Adobe Acrobat and Reader CVE-2010-3632 Remote Memory Corruption Vulnerability
43746 Adobe Acrobat and Reader Thumbnails Use-After-Free Remote Code Execution Vulnerability
43729 Adobe Acrobat and Reader 'ACE.dll' ICC Streams Remote Memory Corruption Vulnerability
43726 Adobe Acrobat and Reader ICC Parsing Remote Memory Corruption Vulnerability
43733 Adobe Acrobat and Reader CVE-2010-3631 Array Indexing Remote Code Execution Vulnerability
43744 Adobe Acrobat and Reader CVE-2010-3657 Denial of Service Vulnerability
43741 Adobe Acrobat and Reader CVE-2010-3656 Denial of Service Vulnerability
43740 Adobe Acrobat and Reader for Linux CVE-2010-2887 Multiple Privilege Escalation Vulnerabilities
43738 Adobe Acrobat and Reader CVE-2010-3658 Remote Memory Corruption Vulnerability
43734 Adobe Acrobat and Reader CVE-2010-3628 Remote Memory Corruption Vulnerability
43732 Adobe Acrobat and Reader CVE-2010-3629 Remote Code Execution Vulnerability
43730 Adobe Acrobat and Reader CVE-2010-3625 Remote Code Execution Vulnerability
43727 Adobe Acrobat and Reader CVE-2010-3626 Font Parsing Remote Code Execution Vulnerability
43725 Adobe Acrobat and Reader CVE-2010-3620 Remote Code Execution Vulnerability
43724 Adobe Acrobat and Reader CVE-2010-3619 Remote Memory Corruption Vulnerability
43723 Adobe Acrobat and Reader CVE-2010-2889 Font Parsing Remote Code Execution Vulnerability
43722 Adobe Acrobat and Reader CVE-2010-2890 Remote Memory Corruption Vulnerability
43205 Adobe Flash Player CVE-2010-2884 Unspecified Remote Code Execution Vulnerability
43057 Adobe Reader 'CoolType.dll' TTF Font Remote Code Execution Vulnerability
43731 Adobe Acrobat and Reader CVE-2010-3623 Remote Memory Corruption Vulnerability
43739 Adobe Acrobat and Reader CVE-2010-2888 Multiple Remote Code Execution Vulnerabilities
43736 Adobe Acrobat and Reader for Mac CVE-2010-3624 Remote Code Execution Vulnerability

RETIRED: Adobe Acrobat and Reader 9.3.4 Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and may not require specific exploit code.

RETIRED: Adobe Acrobat and Reader 9.3.4 Multiple Remote Vulnerabilities

Solution:
Adobe will be releasing updates on October 5th 2010. Please see the references for more information.

RETIRED: Adobe Acrobat and Reader 9.3.4 Multiple Remote Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Adobe Security Advisory APSB10-21 (Adobe)