Comment 0 for bug 385414

Notes: update for Linux will release in 16 Jun.

http://www.adobe.com/support/security/bulletins/apsb09-07.html

|---------------------------
| Severity rating
|---------------------------
|
| Adobe categorizes this as a critical update and recommends that users apply the update for their product
| installations.
|
|---------------------------
| Details
|---------------------------
|
| Critical vulnerabilities have been identified in Adobe Reader 9.1.1 and Acrobat 9.1.1 and earlier versions.
| These vulnerabilities would cause the application to crash and could potentially allow an attacker to take
| control of the affected system.
|
|
| This update resolves a stack overflow vulnerability that could potentially lead to code execution (CVE-2009-1855).
|
| This update resolves an integer overflow that leads to a Denial of Service (DoS); arbitrary code execution has
| not been demonstrated, but may be possible (CVE-2009-1856).
|
| This update resolves a memory corruption vulnerability that leads to a Denial of Service (DoS); arbitrary code
| execution has not been demonstrated, but may be possible (CVE-2009-1857).
|
| This update resolves a memory corruption vulnerability in the JBIG2 filter that could potentially lead to code
| execution (CVE-2009-1858).
|
| This update resolves a memory corruption vulnerability that could potentially lead to code execution
| (CVE-2009-1859).
|
| This update resolves a memory corruption vulnerability in the JBIG2 filter that leads to a Denial of Service
| (DoS); arbitrary code execution has not been demonstrated, but may be possible (CVE-2009-0198).
|
| This update resolves multiple heap overflow vulnerabilities in the JBIG2 filter that could potentially lead to
| code execution (CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, CVE-2009-0888,
| CVE-2009-0889).
|
| This update resolves multiple heap overflow vulnerabilities that could potentially lead to code execution
| (CVE-2009-1861).