偵測

Plugin

SuSE 11.1 安全性更新：acroread (SAT 修補程式編號 4057)

high Nessus Plugin ID 52565

語系：

概要

遠端 SuSE 11 主機缺少一個或多個安全性更新。

說明

特製的 PDF 文件可造成 acroread 損毀，或導致執行任意程式碼。Acroread 已更新至 9.4.2 版，可解決這些問題 (CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586 / CVE-2011-0587 / CVE-2011-0588 / CVE-2011-0589 / CVE-2011-0590 / CVE-2011-0591 / CVE-2011-0592 / CVE-2011-0593 / CVE-2011-0594 / CVE-2011-0595 / CVE-2011-0596 / CVE-2011-0598 / CVE-2011-0599 / CVE-2011-0600 / CVE-2011-0602 / CVE-2011-0603 / CVE-2011-0604 / CVE-2011-0606 / CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 / CVE-2011-0573 / CVE-2011-0574 / CVE-2011-0575 / CVE-2011-0577 / CVE-2011-0578 / CVE-2011-0607 / CVE-2011-0608)

解決方案

套用 SAT 修補程式編號 4057。

另請參閱

https://bugzilla.novell.com/show_bug.cgi?id=669550

http://support.novell.com/security/cve/CVE-2010-4091.html

http://support.novell.com/security/cve/CVE-2011-0558.html

http://support.novell.com/security/cve/CVE-2011-0559.html

http://support.novell.com/security/cve/CVE-2011-0560.html

http://support.novell.com/security/cve/CVE-2011-0561.html

http://support.novell.com/security/cve/CVE-2011-0562.html

http://support.novell.com/security/cve/CVE-2011-0563.html

http://support.novell.com/security/cve/CVE-2011-0565.html

http://support.novell.com/security/cve/CVE-2011-0566.html

http://support.novell.com/security/cve/CVE-2011-0567.html

http://support.novell.com/security/cve/CVE-2011-0570.html

http://support.novell.com/security/cve/CVE-2011-0571.html

http://support.novell.com/security/cve/CVE-2011-0572.html

http://support.novell.com/security/cve/CVE-2011-0573.html

http://support.novell.com/security/cve/CVE-2011-0574.html

http://support.novell.com/security/cve/CVE-2011-0575.html

http://support.novell.com/security/cve/CVE-2011-0577.html

http://support.novell.com/security/cve/CVE-2011-0578.html

http://support.novell.com/security/cve/CVE-2011-0585.html

http://support.novell.com/security/cve/CVE-2011-0586.html

http://support.novell.com/security/cve/CVE-2011-0587.html

http://support.novell.com/security/cve/CVE-2011-0588.html

http://support.novell.com/security/cve/CVE-2011-0589.html

http://support.novell.com/security/cve/CVE-2011-0590.html

http://support.novell.com/security/cve/CVE-2011-0591.html

http://support.novell.com/security/cve/CVE-2011-0592.html

http://support.novell.com/security/cve/CVE-2011-0593.html

http://support.novell.com/security/cve/CVE-2011-0594.html

http://support.novell.com/security/cve/CVE-2011-0595.html

http://support.novell.com/security/cve/CVE-2011-0596.html

http://support.novell.com/security/cve/CVE-2011-0598.html

http://support.novell.com/security/cve/CVE-2011-0599.html

http://support.novell.com/security/cve/CVE-2011-0600.html

http://support.novell.com/security/cve/CVE-2011-0602.html

http://support.novell.com/security/cve/CVE-2011-0603.html

http://support.novell.com/security/cve/CVE-2011-0604.html

http://support.novell.com/security/cve/CVE-2011-0606.html

http://support.novell.com/security/cve/CVE-2011-0607.html

http://support.novell.com/security/cve/CVE-2011-0608.html

Plugin 詳細資訊

嚴重性: High

ID: 52565

檔案名稱: suse_11_acroread-110301.nasl

版本: 1.11

類型: local

代理程式: unix

系列: SuSE Local Security Checks

已發布: 2011/3/7

已更新: 2021/1/19

支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

風險資訊

VPR

風險因素: Critical

分數: 9.0

CVSS v2

風險因素: High

基本分數: 9.3

媒介: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

弱點資訊

CPE: p-cpe:/a:novell:suse_linux:11:acroread, p-cpe:/a:novell:suse_linux:11:acroread-cmaps, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ja, p-cpe:/a:novell:suse_linux:11:acroread-fonts-ko, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_cn, p-cpe:/a:novell:suse_linux:11:acroread-fonts-zh_tw, cpe:/o:novell:suse_linux:11

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

可被惡意程式利用: true

可輕鬆利用: Exploits are available

修補程式發佈日期: 2011/3/1

參考資訊

CVE: CVE-2010-4091, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0607, CVE-2011-0608