RETIRED: Adobe Acrobat and Reader APSB11-24 Advance Multiple Remote Vulnerabilities

Bugtraq ID:	49520
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 08 2011 12:00AM
Updated:	Jun 20 2013 09:39AM
Credit:	Adobe
Vulnerable:	Adobe Reader 9.3.4 Adobe Reader 9.3.3 Adobe Reader 9.3.2 Adobe Reader 9.3.1 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.2.6 Adobe Reader 8.2.5 Adobe Reader 8.2.4 Adobe Reader 8.2.3 Adobe Reader 8.2.2 Adobe Reader 8.2.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.4.3 Adobe Reader 9.4.2 Adobe Reader 9.4.1 Adobe Reader 9.4 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9 Adobe Reader 9 Adobe Reader 8.3 Adobe Reader 8.2 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Reader 8 Adobe Reader 10.0.3 Adobe Reader 10.0.2 Adobe Reader 10.0.1 Adobe Reader 10.0 Adobe Acrobat Standard 9.3.4 Adobe Acrobat Standard 9.3.3 Adobe Acrobat Standard 9.3.2 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.2.6 Adobe Acrobat Standard 8.2.5 Adobe Acrobat Standard 8.2.4 Adobe Acrobat Standard 8.2.2 Adobe Acrobat Standard 8.2.1 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.4.3 Adobe Acrobat Standard 9.4.2 Adobe Acrobat Standard 9.4.1 Adobe Acrobat Standard 9.4 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.3 Adobe Acrobat Standard 8.2 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Standard 10.1 Adobe Acrobat Standard 10.0.3 Adobe Acrobat Standard 10.0.2 Adobe Acrobat Standard 10.0.1 Adobe Acrobat Standard 10.0 Adobe Acrobat Professional 9.3.4 Adobe Acrobat Professional 9.3.3 Adobe Acrobat Professional 9.3.2 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.2.6 Adobe Acrobat Professional 8.2.5 Adobe Acrobat Professional 8.2.4 Adobe Acrobat Professional 8.2.2 Adobe Acrobat Professional 8.2.1 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.4.3 Adobe Acrobat Professional 9.4.2 Adobe Acrobat Professional 9.4.1 Adobe Acrobat Professional 9.4 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Extended Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.3 Adobe Acrobat Professional 8.2 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat Professional 10.1 Adobe Acrobat Professional 10.0.3 Adobe Acrobat Professional 10.0.2 Adobe Acrobat Professional 10.0.1 Adobe Acrobat Professional 10.0 Adobe Acrobat 9.3.3 Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.1 Adobe Acrobat 9.1.1 Adobe Acrobat 8.2.5 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.3 Adobe Acrobat 8.2.2 Adobe Acrobat 8.1.8 Adobe Acrobat 9.4.3 Adobe Acrobat 9.4.2 Adobe Acrobat 9.4.1 Adobe Acrobat 9.4 Adobe Acrobat 9.3 Adobe Acrobat 9.2 Adobe Acrobat 9 Adobe Acrobat 10.0.3 Adobe Acrobat 10.0.2 Adobe Acrobat 10.0.1 Adobe Acrobat 10.0
Not Vulnerable:

RETIRED: Adobe Acrobat and Reader APSB11-24 Advance Multiple Remote Vulnerabilities

Adobe released an advance advisory regarding multiple security vulnerabilities in Reader and Acrobat. The vendor indicates that these issues will be addressed in updates for Microsoft Windows and Mac platforms on Tuesday, September 13th 2011.

This BID will be updated when the advisory is released.

The following products are affected:

Adobe Acrobat X 10.1 and prior
Adobe Acrobat 9.4.5 and prior
Adobe Acrobat 8.3 and prior
Adobe Reader 9.4.3 and prior
Adobe Reader X 10.1 and prior

This BID is being retired. The following individual records exist to better document the issues:

49572 Adobe Acrobat and Reader U3D Tiff Remote Buffer Overflow Vulnerability
49575 Adobe Acrobat and Reader CVE-2011-2435 Remote Buffer Overflow Vulnerability
49576 Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability
49577 Adobe Acrobat and Reader CVE-2011-2434 Remote Heap Buffer Overflow Vulnerability
49578 Adobe Acrobat and Reader CVE-2011-2436 Remote Heap Buffer Overflow Vulnerability
49579 Adobe Acrobat and Reader CVE-2011-2437 Remote Heap Buffer Overflow Vulnerability
49580 Adobe Acrobat and Reader CVE-2011-2438 Multiple Remote Stack Buffer Overflow Vulnerabilities
49581 Adobe Acrobat and Reader CVE-2011-2441 Multiple Remote Stack Buffer Overflow Vulnerabilities
49582 Adobe Acrobat and Reader CVE-2011-2431 Remote Security Bypass Vulnerability
49583 Adobe Acrobat and Reader CVE-2011-2439 Memory Leak Remote Code Execution Vulnerability
49584 Adobe Acrobat and Reader CVE-2011-2440 Use After Free Vulnerability
49585 Adobe Acrobat and Reader CVE-2011-2442 Remote Code Execution Vulnerability
49586 Adobe Acrobat and Reader CVE-2011-1353 Local Privilege Escalation Vulnerability

RETIRED: Adobe Acrobat and Reader APSB11-24 Advance Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Adobe Acrobat and Reader APSB11-24 Advance Multiple Remote Vulnerabilities

Solution:
The vendor plans to release fixes to address these issues on Tuesday, Sept 13, 2011. Please see the references for details.

RETIRED: Adobe Acrobat and Reader APSB11-24 Advance Multiple Remote Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Adobe Security Advisory ASPB11-24 (Adobe)