Redhat Security Update Fixes Adobe Acrobat Reader Vulnerabilities

[Brad]

* Technical Description *

Redhat has released a security patch to correct two vulnerabilities identified in Adobe Acrobat Reader. The first flaw is due to a buffer overflow error in the "UnixAppOpenFilePerform()" function when handling documents containing a malformed "/Filespec" tag, which could be exploited by attackers to compromise a vulnerable system by convincing a user to open a specially crafted PDF document. The second issue is caused due to temporary files being created with permissions based on a user's umask in the "/tmp" folder under certain circumstances when documents are opened, which could be exploited by local users to view other users' PDF documents.

 * Affected Products *

Red Hat Desktop (v. 3)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Enterprise Linux WS (v. 4)

 * Solution *

Use Red Hat Network to download and update your packages :
http://rhn.redhat.com/

 * References *

http://www.frsirt.com/english/advisories/2005/1025
http://rhn.redhat.com/errata/RHSA-2005-575.html