sledp3-acroread

Security update for Acrobat Reader

This update of acroread fixes two critical vulnerabilities. The first one in referenced by CVE-2010-3654 and exists in the integrated authplay component that may allow remote attackers to take control over a victims system. (CVE-2010-3654: CVSS v2 Base Score: 6.8 (critical) (AV:N/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)) The other issue was disclosed on full-disclosure to demonstrate a denial of service attack, an extend of this attack to execute arbitrary code could be possible. (CVE-2010-4091: CVSS v2 Base Score: 6.8 (critical) (AV:N/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)) Security Issue references: * CVE-2010-3654 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3654> * CVE-2010-4091 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4091> security acroread i586 7743ddc3bd599709ee56c95c78e032257232ec85 acroread-cmaps noarch 808de6e7ff8b05d133f7a26a95d56dd36030dbbf acroread-fonts-ja noarch c6687495a785da76f5ddfd81e50a839c48e84d9f acroread-fonts-ko noarch 27c9940823b9c1fe1d403967cfd0ac801d9a7f41 acroread-fonts-zh_CN noarch 040e80e0b9cfa5cb6e4e4d0d12f35fd43c5d525c acroread-fonts-zh_TW noarch 447c1b38dd9a9a16f5b25a9cbd3cb1fe363a4579