Test ID:	1.3.6.1.4.1.25623.1.0.69029
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201009-05 (acroread)
Summary:	The remote host is missing updates announced in;advisory GLSA 201009-05.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201009-05. Vulnerability Insight: Multiple vulnerabilities in Adobe Reader might result in the execution of arbitrary code or other attacks. Solution: All Adobe Reader users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-text/acroread-9.3.4' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3953 BugTraq ID: 37758 http://www.securityfocus.com/bid/37758 Cert/CC Advisory: TA10-013A http://www.us-cert.gov/cas/techalerts/TA10-013A.html http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl http://osvdb.org/61690 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242 http://www.redhat.com/support/errata/RHSA-2010-0060.html http://www.securitytracker.com/id?1023446 http://secunia.com/advisories/38138 http://secunia.com/advisories/38215 SuSE Security Announcement: SUSE-SA:2010:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.vupen.com/english/advisories/2010/0103 XForce ISS Database: acrobat-reader-u3d-code-execution(55551) https://exchange.xforce.ibmcloud.com/vulnerabilities/55551 Common Vulnerability Exposure (CVE) ID: CVE-2009-4324 BugTraq ID: 37331 http://www.securityfocus.com/bid/37331 CERT/CC vulnerability note: VU#508357 http://www.kb.cert.org/vuls/id/508357 http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 http://www.symantec.com/connect/blogs/zero-day-xmas-present http://osvdb.org/60980 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795 http://secunia.com/advisories/37690 http://www.vupen.com/english/advisories/2009/3518 XForce ISS Database: acro-reader-unspecifed-code-execution(54747) https://exchange.xforce.ibmcloud.com/vulnerabilities/54747 Common Vulnerability Exposure (CVE) ID: CVE-2010-0186 http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html BugTraq ID: 38198 http://www.securityfocus.com/bid/38198 http://security.gentoo.org/glsa/glsa-201101-09.xml http://www.osvdb.org/62300 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518 RedHat Security Advisories: RHSA-2010:0102 https://rhn.redhat.com/errata/RHSA-2010-0102.html RedHat Security Advisories: RHSA-2010:0103 https://rhn.redhat.com/errata/RHSA-2010-0103.html http://www.redhat.com/support/errata/RHSA-2010-0114.html http://securitytracker.com/id?1023585 http://secunia.com/advisories/38547 http://secunia.com/advisories/38639 http://secunia.com/advisories/38915 http://secunia.com/advisories/40220 http://secunia.com/advisories/43026 SuSE Security Announcement: SUSE-SR:2010:006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html http://www.vupen.com/english/advisories/2010/1481 http://www.vupen.com/english/advisories/2011/0192 Common Vulnerability Exposure (CVE) ID: CVE-2010-0188 BugTraq ID: 38195 http://www.securityfocus.com/bid/38195 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697 http://securitytracker.com/id?1023601 http://www.vupen.com/english/advisories/2010/0399 XForce ISS Database: adobe-unspec-priv-escalation(56297) https://exchange.xforce.ibmcloud.com/vulnerabilities/56297 Common Vulnerability Exposure (CVE) ID: CVE-2010-0190 BugTraq ID: 39329 http://www.securityfocus.com/bid/39329 Cert/CC Advisory: TA10-103C http://www.us-cert.gov/cas/techalerts/TA10-103C.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6986 http://www.vupen.com/english/advisories/2010/0873 Common Vulnerability Exposure (CVE) ID: CVE-2010-0191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6729 Common Vulnerability Exposure (CVE) ID: CVE-2010-0192 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7046 Common Vulnerability Exposure (CVE) ID: CVE-2010-0193 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7352 XForce ISS Database: adobe-acrobat-unspec-code-exec(57701) https://exchange.xforce.ibmcloud.com/vulnerabilities/57701 Common Vulnerability Exposure (CVE) ID: CVE-2010-0194 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6823 Common Vulnerability Exposure (CVE) ID: CVE-2010-0195 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420 Common Vulnerability Exposure (CVE) ID: CVE-2010-0196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7064 Common Vulnerability Exposure (CVE) ID: CVE-2010-0197 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7298 Common Vulnerability Exposure (CVE) ID: CVE-2010-0198 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7106 Common Vulnerability Exposure (CVE) ID: CVE-2010-0199 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6900 Common Vulnerability Exposure (CVE) ID: CVE-2010-0201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7056 Common Vulnerability Exposure (CVE) ID: CVE-2010-0202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6733 Common Vulnerability Exposure (CVE) ID: CVE-2010-0203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7494 Common Vulnerability Exposure (CVE) ID: CVE-2010-0204 BugTraq ID: 39522 http://www.securityfocus.com/bid/39522 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7387 XForce ISS Database: acrobat-unspec-code-execution(57711) https://exchange.xforce.ibmcloud.com/vulnerabilities/57711 Common Vulnerability Exposure (CVE) ID: CVE-2010-1241 BugTraq ID: 39227 http://www.securityfocus.com/bid/39227 http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/ http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li http://www.youtube.com/watch?v=9EVHtY1-0q8 http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940 XForce ISS Database: reader-customheap-code-execution(57589) https://exchange.xforce.ibmcloud.com/vulnerabilities/57589 Common Vulnerability Exposure (CVE) ID: CVE-2010-1285 BugTraq ID: 41232 http://www.securityfocus.com/bid/41232 Bugtraq: 20100630 VUPEN Security Research - Adobe Acrobat and Reader "newclass" Memory Corruption Vulnerability (CVE-2010-1285) (Google Search) http://www.securityfocus.com/archive/1/512099 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 http://www.securitytracker.com/id?1024159 http://www.vupen.com/english/advisories/2010/1636 Common Vulnerability Exposure (CVE) ID: CVE-2010-1295 BugTraq ID: 41230 http://www.securityfocus.com/bid/41230 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7504 Common Vulnerability Exposure (CVE) ID: CVE-2010-1297 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html BugTraq ID: 40586 http://www.securityfocus.com/bid/40586 BugTraq ID: 40759 http://www.securityfocus.com/bid/40759 Cert/CC Advisory: TA10-159A http://www.us-cert.gov/cas/techalerts/TA10-159A.html Cert/CC Advisory: TA10-162A http://www.us-cert.gov/cas/techalerts/TA10-162A.html CERT/CC vulnerability note: VU#486225 http://www.kb.cert.org/vuls/id/486225 http://www.exploit-db.com/exploits/13787 HPdes Security Advisory: HPSBMA02547 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 HPdes Security Advisory: SSRT100179 http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/ http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx http://www.osvdb.org/65141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7116 http://www.redhat.com/support/errata/RHSA-2010-0464.html http://www.redhat.com/support/errata/RHSA-2010-0470.html http://securitytracker.com/id?1024057 http://securitytracker.com/id?1024058 http://securitytracker.com/id?1024085 http://securitytracker.com/id?1024086 http://secunia.com/advisories/40026 http://secunia.com/advisories/40034 http://secunia.com/advisories/40144 http://secunia.com/advisories/40545 SuSE Security Announcement: SUSE-SA:2010:024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html TurboLinux Advisory: TLSA-2010-19 http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt http://www.vupen.com/english/advisories/2010/1348 http://www.vupen.com/english/advisories/2010/1349 http://www.vupen.com/english/advisories/2010/1421 http://www.vupen.com/english/advisories/2010/1432 http://www.vupen.com/english/advisories/2010/1434 http://www.vupen.com/english/advisories/2010/1453 http://www.vupen.com/english/advisories/2010/1482 http://www.vupen.com/english/advisories/2010/1522 http://www.vupen.com/english/advisories/2010/1793 XForce ISS Database: adobe-authplay-code-execution(59137) https://exchange.xforce.ibmcloud.com/vulnerabilities/59137 Common Vulnerability Exposure (CVE) ID: CVE-2010-2168 BugTraq ID: 41236 http://www.securityfocus.com/bid/41236 Bugtraq: 20100630 VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability (CVE-2010-2168) (Google Search) http://www.securityfocus.com/archive/1/512096 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7167 Common Vulnerability Exposure (CVE) ID: CVE-2010-2201 BugTraq ID: 41237 http://www.securityfocus.com/bid/41237 Bugtraq: 20100630 VUPEN Security Research - Adobe Acrobat and Reader "pushstring" Memory Corruption Vulnerability (CVE-2010-2201) (Google Search) http://www.securityfocus.com/archive/1/512098 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6854 Common Vulnerability Exposure (CVE) ID: CVE-2010-2202 BugTraq ID: 41234 http://www.securityfocus.com/bid/41234 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7336 Common Vulnerability Exposure (CVE) ID: CVE-2010-2203 BugTraq ID: 41235 http://www.securityfocus.com/bid/41235 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14495 Common Vulnerability Exposure (CVE) ID: CVE-2010-2204 BugTraq ID: 41231 http://www.securityfocus.com/bid/41231 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7242 Common Vulnerability Exposure (CVE) ID: CVE-2010-2205 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7070 Common Vulnerability Exposure (CVE) ID: CVE-2010-2206 BugTraq ID: 41241 http://www.securityfocus.com/bid/41241 Bugtraq: 20100630 Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability (Google Search) http://www.securityfocus.com/archive/1/512092/100/0/threaded http://secunia.com/secunia_research/2010-88/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200 Common Vulnerability Exposure (CVE) ID: CVE-2010-2207 BugTraq ID: 41239 http://www.securityfocus.com/bid/41239 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6849 Common Vulnerability Exposure (CVE) ID: CVE-2010-2208 BugTraq ID: 41244 http://www.securityfocus.com/bid/41244 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7188 Common Vulnerability Exposure (CVE) ID: CVE-2010-2209 BugTraq ID: 41240 http://www.securityfocus.com/bid/41240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6957 Common Vulnerability Exposure (CVE) ID: CVE-2010-2210 BugTraq ID: 41242 http://www.securityfocus.com/bid/41242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6929 Common Vulnerability Exposure (CVE) ID: CVE-2010-2211 BugTraq ID: 41243 http://www.securityfocus.com/bid/41243 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6930 Common Vulnerability Exposure (CVE) ID: CVE-2010-2212 Bugtraq: 20100630 VUPEN Security Research - Adobe Acrobat and Reader #1023 Tag Buffer Overflow Vulnerability (CVE-2010-2212) (Google Search) http://www.securityfocus.com/archive/1/512095/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6798
Copyright	Copyright (C) 2011 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.