Otkriveno je nekoliko sigurnosnih propusta paketa Adobe Reader koje je moguće iskoristiti za pokretanje proizvoljnog programskog koda i povećanje napadačevih ovlasti.
Paket:
acroread 9.x
Operacijski sustavi:
openSUSE 11.3, openSUSE 11.4
Kritičnost:
6.9
Problem:
preljev međuspremnika
Iskorištavanje:
lokalno/udaljeno
Posljedica:
dobivanje većih privilegija, proizvoljno izvršavanje programskog koda
openSUSE Security Update: acroread
______________________________________________________________________________
Announcement ID: openSUSE-SU-2011:1238-1
Rating: critical
References: #717724
Cross-References: CVE-2011-1353 CVE-2011-2431 CVE-2011-2432
CVE-2011-2433 CVE-2011-2434 CVE-2011-2435
CVE-2011-2436 CVE-2011-2437 CVE-2011-2438
CVE-2011-2439 CVE-2011-2440 CVE-2011-2441
CVE-2011-2442
Affected Products:
openSUSE 11.4
openSUSE 11.3
______________________________________________________________________________
An update that fixes 13 vulnerabilities is now available.
It includes one version update.
Description:
acrobat reader was updated to version 9.4.6 to fix several
security issues (CVE-2011-1353, CVE-2011-2431,
CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435,
CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439,
CVE-2011-2440, CVE-2011-2441, CVE-2011-2442)
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 11.4:
zypper in -t patch acroread-5411
- openSUSE 11.3:
zypper in -t patch acroread-5411
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 11.4 (i586) [New Version: 9.4.6]:
acroread-9.4.6-0.5.1
- openSUSE 11.3 (i586) [New Version: 9.4.6]:
acroread-9.4.6-0.2.1
References:
http://support.novell.com/security/cve/CVE-2011-1353.html
http://support.novell.com/security/cve/CVE-2011-2431.html
http://support.novell.com/security/cve/CVE-2011-2432.html
http://support.novell.com/security/cve/CVE-2011-2433.html
http://support.novell.com/security/cve/CVE-2011-2434.html
http://support.novell.com/security/cve/CVE-2011-2435.html
http://support.novell.com/security/cve/CVE-2011-2436.html
http://support.novell.com/security/cve/CVE-2011-2437.html
http://support.novell.com/security/cve/CVE-2011-2438.html
http://support.novell.com/security/cve/CVE-2011-2439.html
http://support.novell.com/security/cve/CVE-2011-2440.html
http://support.novell.com/security/cve/CVE-2011-2441.html
http://support.novell.com/security/cve/CVE-2011-2442.html
https://bugzilla.novell.com/717724
--
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Posljednje sigurnosne preporuke