SB2010021801 - Red Hat update for acroread

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2010021801

SB2010021801 - Red Hat update for acroread

Published: February 18, 2010 Updated: May 2, 2017

Security Bulletin ID SB2010021801
Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Denial of service (CVE-ID: CVE-2010-0186)

The vulnerability allows a remote attacker to cause denial of service (DoS) on the target system.

The vulnerability exists due to improper permissions control. A remote attacker can trick the victim into visiting a specially crafted Web site, bypass cross-domain sandbox controls and send unauthorized cross-domain requests to cause the application to crash.

Successful exploitation of this vulnerability may result in denial of service.


2) Arbitrary code execution (CVE-ID: CVE-2010-0188)

The vulnerability allows a remote attacker to gain elevated privileges on the target system.

The vulnerability exists due to improper permissions control. A remote attacker can gain elevated privileges, cause the target application to crash or even execute arbitrary code.

Successful exploitation of this vulnerability may result in arbitrary code execution.


Remediation

Install update from vendor's website.

References