| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | = 3.0= 3.1= 4.0= 4.0.5= 4.0.5a= 4.0.5c= 5.0= 5.0.10= 5.0.5= 5.0.6= 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3≤ 9.2 | |
| acrobat reader | = 3.0= 3.01= 3.02= 4.0= 4.0.5= 4.0.5a= 4.0.5c= 4.5= 5.0= 5.0.10= 5.0.11= 5.0.5= 5.0.6= 5.0.7= 5.0.9= 5.1= 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3≤ 9.2 |
Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free