Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Reader Apsb10 15 | — | — | Apr 12, 2012 | Apr 5, 2010 |
| Adobe Reader Apsb10 17 | — | — | Apr 12, 2012 | Apr 5, 2010 |
| Suse | — | Upgrade acroread-fonts-koUpgrade acroread_jaUpgrade acroread-fonts-zh_CNUpgrade acroread-fonts-zh_TWUpgrade acroreadUpgrade acroread-fonts-jaUpgrade acroread-cmaps | Feb 17, 2015 | Apr 5, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub