SuSE 11.1 安全更新:acroread(SAT 修补程序编号 4057)

high Nessus 插件 ID 52565

简介

远程 SuSE 11 主机缺少一个或多个安全更新。

描述

特别构建的 PDF 文档可导致 acroread 崩溃,或导致执行任意代码。Acroread 已更新到版本 9.4.2,以解决这些问题 (CVE-2010-4091/CVE-2011-0562/ CVE-2011-0563/CVE-2011-0565/CVE-2011-0566/CVE-2011-0567/ CVE-2011-0570/CVE-2011-0585/CVE-2011-0586/CVE-2011-0587/ CVE-2011-0588/CVE-2011-0589/CVE-2011-0590/CVE-2011-0591/ CVE-2011-0592/CVE-2011-0593/CVE-2011-0594/CVE-2011-0595/ CVE-2011-0596/CVE-2011-0598/CVE-2011-0599/CVE-2011-0600/ CVE-2011-0602/CVE-2011-0603/CVE-2011-0604/CVE-2011-0606/ CVE-2011-0558/CVE-2011-0559/CVE-2011-0560/CVE-2011-0561/ CVE-2011-0571/CVE-2011-0572/CVE-2011-0573/CVE-2011-0574/ CVE-2011-0575/CVE-2011-0577/CVE-2011-0578/CVE-2011-0607/ CVE-2011-0608)

解决方案

应用 SAT 修补程序编号 4057。

另见

https://bugzilla.novell.com/show_bug.cgi?id=669550

http://support.novell.com/security/cve/CVE-2010-4091.html

http://support.novell.com/security/cve/CVE-2011-0558.html

http://support.novell.com/security/cve/CVE-2011-0559.html

http://support.novell.com/security/cve/CVE-2011-0560.html

http://support.novell.com/security/cve/CVE-2011-0561.html

http://support.novell.com/security/cve/CVE-2011-0562.html

http://support.novell.com/security/cve/CVE-2011-0563.html

http://support.novell.com/security/cve/CVE-2011-0565.html

http://support.novell.com/security/cve/CVE-2011-0566.html

http://support.novell.com/security/cve/CVE-2011-0567.html

http://support.novell.com/security/cve/CVE-2011-0570.html

http://support.novell.com/security/cve/CVE-2011-0571.html

http://support.novell.com/security/cve/CVE-2011-0572.html

http://support.novell.com/security/cve/CVE-2011-0573.html

http://support.novell.com/security/cve/CVE-2011-0574.html

http://support.novell.com/security/cve/CVE-2011-0575.html

http://support.novell.com/security/cve/CVE-2011-0577.html

http://support.novell.com/security/cve/CVE-2011-0578.html

http://support.novell.com/security/cve/CVE-2011-0585.html

http://support.novell.com/security/cve/CVE-2011-0586.html

http://support.novell.com/security/cve/CVE-2011-0587.html

http://support.novell.com/security/cve/CVE-2011-0588.html

http://support.novell.com/security/cve/CVE-2011-0589.html

http://support.novell.com/security/cve/CVE-2011-0590.html

http://support.novell.com/security/cve/CVE-2011-0591.html

http://support.novell.com/security/cve/CVE-2011-0592.html

http://support.novell.com/security/cve/CVE-2011-0593.html

http://support.novell.com/security/cve/CVE-2011-0594.html

http://support.novell.com/security/cve/CVE-2011-0595.html

http://support.novell.com/security/cve/CVE-2011-0596.html

http://support.novell.com/security/cve/CVE-2011-0598.html

http://support.novell.com/security/cve/CVE-2011-0599.html

http://support.novell.com/security/cve/CVE-2011-0600.html

http://support.novell.com/security/cve/CVE-2011-0602.html

http://support.novell.com/security/cve/CVE-2011-0603.html

http://support.novell.com/security/cve/CVE-2011-0604.html

http://support.novell.com/security/cve/CVE-2011-0606.html

http://support.novell.com/security/cve/CVE-2011-0607.html

http://support.novell.com/security/cve/CVE-2011-0608.html

插件详情

严重性: High

ID: 52565

文件名: suse_11_acroread-110301.nasl

版本: 1.11

类型: local

代理: unix

发布时间: 2011/3/7

最近更新时间: 2021/1/19

支持的传感器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

风险信息

VPR

风险因素: Critical

分数: 9.0

CVSS v2

风险因素: High

基本分数: 9.3

矢量: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

漏洞信息

CPE: cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:acroread, p-cpe:/a:novell:suse_linux:11:acroread-cmaps, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ja, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ko, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_cn, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_tw

必需的 KB 项: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

可利用: true

易利用性: Exploits are available

补丁发布日期: 2011/3/1

参考资料信息

CVE: CVE-2010-4091, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0607, CVE-2011-0608