Oval Definition:oval:com.redhat.rhsa:def:20091499
Revision Date:2009-10-14Version:602
Title:RHSA-2009:1499: acroread security update (Critical)
Description:Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

  • Multiple flaws were discovered in Adobe Reader. A specially-crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2009-2980, CVE-2009-2983, CVE-2009-2985, CVE-2009-2986, CVE-2009-2990, CVE-2009-2991, CVE-2009-2993, CVE-2009-2994, CVE-2009-2996, CVE-2009-2997, CVE-2009-2998, CVE-2009-3458, CVE-2009-3459, CVE-2009-3462)

  • Multiple flaws were discovered in Adobe Reader. A specially-crafted PDF file could cause Adobe Reader to crash when opened. (CVE-2009-2979, CVE-2009-2988, CVE-2009-3431)

  • An input validation flaw was found in Adobe Reader. Opening a specially-crafted PDF file could lead to a Trust Manager restrictions bypass. (CVE-2009-2981)

    All Adobe Reader users should install these updated packages. They contain Adobe Reader version 8.1.7, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-2979
    CVE-2009-2980
    CVE-2009-2981
    CVE-2009-2983
    CVE-2009-2985
    CVE-2009-2986
    CVE-2009-2988
    CVE-2009-2990
    CVE-2009-2991
    CVE-2009-2993
    CVE-2009-2994
    CVE-2009-2996
    CVE-2009-2997
    CVE-2009-2998
    CVE-2009-3431
    CVE-2009-3458
    CVE-2009-3459
    CVE-2009-3462
    RHSA-2009:1499-01
    Platform(s):Supplementary for Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux 5 is installed
  • AND Package Information
  • acroread is earlier than 0:8.1.7-1.el5
  • AND acroread is signed with Red Hat redhatrelease key
  • OR
  • acroread-plugin is earlier than 0:8.1.7-1.el5
  • AND acroread-plugin is signed with Red Hat redhatrelease key
  • BACK