RETIRED: Adobe Acrobat and Reader APSB11-16 Advance Multiple Remote Vulnerabilities

Bugtraq ID:	48197
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 09 2011 12:00AM
Updated:	Jun 20 2013 09:39AM
Credit:	Adobe
Vulnerable:	Adobe Reader 9.3.4 Adobe Reader 9.3.3 Adobe Reader 9.3.2 Adobe Reader 9.3.1 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 9.4.3 Adobe Reader 9.4.2 Adobe Reader 9.4.1 Adobe Reader 9.4 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9 Adobe Reader 9 Adobe Reader 10.0.3 Adobe Reader 10.0.2 Adobe Reader 10.0.1 Adobe Reader 10.0 Adobe Acrobat Standard 9.3.4 Adobe Acrobat Standard 9.3.3 Adobe Acrobat Standard 9.3.2 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.2.5 Adobe Acrobat Standard 8.2.4 Adobe Acrobat Standard 8.2.2 Adobe Acrobat Standard 8.2.1 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.4.3 Adobe Acrobat Standard 9.4.2 Adobe Acrobat Standard 9.4.1 Adobe Acrobat Standard 9.4 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.2 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 10.0.3 Adobe Acrobat Standard 10.0.2 Adobe Acrobat Standard 10.0.1 Adobe Acrobat Standard 10.0 Adobe Acrobat Professional 9.3.4 Adobe Acrobat Professional 9.3.3 Adobe Acrobat Professional 9.3.2 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.2.5 Adobe Acrobat Professional 8.2.4 Adobe Acrobat Professional 8.2.2 Adobe Acrobat Professional 8.2.1 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.4.3 Adobe Acrobat Professional 9.4.2 Adobe Acrobat Professional 9.4.1 Adobe Acrobat Professional 9.4 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Extended Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.2 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 10.0.3 Adobe Acrobat Professional 10.0.2 Adobe Acrobat Professional 10.0.1 Adobe Acrobat Professional 10.0 Adobe Acrobat 9.3.3 Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.1 Adobe Acrobat 9.1.1 Adobe Acrobat 8.2.5 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.3 Adobe Acrobat 8.2.2 Adobe Acrobat 8.1.8 Adobe Acrobat 9.4.3 Adobe Acrobat 9.4.2 Adobe Acrobat 9.4.1 Adobe Acrobat 9.4 Adobe Acrobat 9.3 Adobe Acrobat 9.2 Adobe Acrobat 9 Adobe Acrobat 10.0.3 Adobe Acrobat 10.0.2 Adobe Acrobat 10.0.1 Adobe Acrobat 10.0
Not Vulnerable:

RETIRED: Adobe Acrobat and Reader APSB11-16 Advance Multiple Remote Vulnerabilities

Adobe Acrobat and Reader are prone to multiple security vulnerabilities.

Adobe released an advance advisory regarding multiple security vulnerabilities in Reader and Acrobat. The vendor indicates that these issues will be addressed in updates for Microsoft Windows and Mac platforms on Tuesday, June 14, 2011.

This BID will be updated when the advisory is released.

The following products are affected:

Adobe Acrobat X 10.0.3 and prior
Adobe Acrobat 9.4.3 and prior
Adobe Reader 9.4.3 and prior
Adobe Reader X 10.0.1, 10.0.3, and prior

This BID is being retired. The following individual records exist to better document these issues:

48240 Adobe Acrobat and Reader '3difr.x3d' Remote Buffer Overflow Vulnerability
48242 Adobe Acrobat and Reader 'tesselate.x3d' Remote Buffer Overflow Vulnerability
48243 Adobe Acrobat and Reader CVE-2011-2096 Remote Heap Buffer Overflow Vulnerability
48244 Adobe Acrobat and Reader CVE-2011-2097 Remote Buffer Overflow Vulnerability
48245 Adobe Acrobat and Reader CVE-2011-2098 Remote Memory Corruption Vulnerability
48246 Adobe Acrobat and Reader CVE-2011-2099 Remote Memory Corruption Vulnerability
48247 Adobe Acrobat and Reader CVE-2011-2103 Remote Memory Corruption Vulnerability
48248 Adobe Acrobat and Reader Font Parsing Remote Memory Corruption Vulnerability
48249 Adobe Acrobat and Reader CVE-2011-2106 Remote Memory Corruption Vulnerability
48251 Adobe Acrobat and Reader CVE-2011-2104 Remote Memory Corruption Vulnerability
48252 Adobe Acrobat and Reader CVE-2011-2100 DLL Loading Arbitrary Code Execution Vulnerability
48253 Adobe Acrobat and Reader CVE-2011-2102 Security Bypass Vulnerability
48255 Adobe Reader and Acrobat Unspecified Cross Domain Scripting Vulnerability

RETIRED: Adobe Acrobat and Reader APSB11-16 Advance Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Adobe Acrobat and Reader APSB11-16 Advance Multiple Remote Vulnerabilities

Solution:
The vendor plans to release fixes to address these issues on Tuesday, June 14, 2011. Please see the references for details.

RETIRED: Adobe Acrobat and Reader APSB11-16 Advance Multiple Remote Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• APSB11-16 Prenotification Security Advisory for Adobe Reader and Acrobat (Adobe)