*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: acroread

http://www.adobe.com/support/security/advisories/apsa10-01.html

A critical  vulnerability exists in Adobe Flash Player 10.0.45.2 and
earlier versions for Windows, Macintosh, Linux and Solaris operating
systems, and the authplay.dll component that ships with Adobe Reader and
Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This
vulnerability (CVE-2010-1297) could cause a crash and potentially allow
an attacker to take control of the affected system. There are reports
that this vulnerability is being actively exploited in the wild against
both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory
will be updated once a schedule has been determined for releasing a fix.

[...]

Deleting, renaming, or removing access to the authplay.dll file that
ships with Adobe Reader and Acrobat 9.x mitigates the threat for those
products, but users will experience a non-exploitable crash or error
message when opening a PDF file that contains SWF content.

** Affects: acroread (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

-- 
CVE-2010-1297: Security Advisory for Flash Player, Adobe Reader and Acrobat 
https://bugs.launchpad.net/bugs/591001
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to