[ GLSA 201206-14 ] Adobe Reader: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Adobe Reader: Multiple vulnerabilities (GLSA 201206-14)
Severity: normal
Exploitable: remote
Date: June 22, 2012
Bug(s): #405949, #411499
ID: 201206-14

Synopsis

Multiple vulnerabilities in Adobe Reader might allow remote
attackers to execute arbitrary code or conduct various other attacks.


Background

Adobe Reader is a closed-source PDF reader.

Affected Packages

Package: app-text/acroread
Vulnerable: < 9.5.1
Unaffected: >= 9.5.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been found in Adobe Reader, including an
integer overflow in TrueType Font handling (CVE-2012-0774) and multiple
unspecified errors which could cause memory corruption.


Impact

A remote attacker could entice a user to open a specially crafted PDF
file, possibly resulting in execution of arbitrary code with the
privileges of the process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Adobe Reader users should upgrade to the latest version: