Gladiator Research and Security

GSA Reference Number: AD100630-01
Related GSA Reference Number: AD100607-01

Simply Put: Adobe has released a patch for the previously reported critical remote-code-execution vulnerability in Adobe Reader and Acrobat.  This patch addresses additional issues as well.  Adobe Reader and Acrobat versions 9.3.2 and earlier should upgrade.

GSA Reference Number: AD100607-01

Simply Put: Adobe has released an advisory for a critical vulnerability in Adobe Flash.  Adobe Reader and Acrobat are also exploitable through the authplay.dll component included with Adobe Reader and Acrobat 9.x.  This vulnerability can lead to remote code execution and are already the target of malware authors.  No patch is available at this time.  However, Adobe has provided workarounds in its advisory.

GSA Reference Number: AD100114-01
Previous GSA Reference Number: AD091215-01

Simply Put: Adobe has released a patch for the previously announced critical remote code execution vulnerability in the Adobe Reader and Acrobat products.  Adobe Reader and Acrobat 9.2 and earlier versions are confirmed as vulnerable.  This vulnerability has become a target of malware authors, and should be patched as quickly as possible.

GSA Reference Number: AD091215-01

Simply Put: A new Adobe Acrobat/Reader remote code execution vulnerability has been observed in targeted attacks on the Internet.  This vulnerability has been confirmed by Adobe; however, no patch is available at this time.  Adobe Reader and Acrobat 9.2 and earlier versions are confirmed as vulnerable.  Although this vulnerability is not in widespread use as of yet, Gladiator believes it will become so in the near future.

GSA Reference Number: AD091209-01

Simply Put: Adobe has released a critical patch to address seven security vulnerabilities regarding its Flash Player and Adobe Air products. Flash is used on most websites for active content, such as animated or interactive menus and images, and movies.  Adobe Air allows users to run active web content outside of a browser.  These vulnerabilities have been rated Critical and could lead to remote code execution or information disclosure.  Flash versions older than 10.0.42.34 and Air versions older than 1.5.3 are affected by these issues.  Gladiator recommends that these patches are applied to all workstations as soon as possible. Users running Flash Player 9 should upgrade to version 10 at this time.

GSA Reference Number: AD090722-01

Simply Put: Adobe Acrobat, Reader, and Flash have a remote code execution vulnerability currently being exploited on the Internet.  Adobe does not have a patch available at this time.  This vulnerability can be exploited by a malicious website to load arbitrary code or take control of a victim’s PC.

GSA Reference Number: AD090625-01

Simply Put: Adobe Shockwave Player, which is used by browsers to play Shockwave media, has a remote code execution vulnerability in version 11.5.0.596 and earlier versions.  Adobe has released a new player to address this vulnerability.  Unfortunately, the current Shockwave Player must be uninstalled before upgrading.  The uninstall requires a reboot.