Description
Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | acroread +1 | 7.0.9-1.2.0.EL4 | RHSA-2007:0017 |
| RHEL 3 | acroread +1 | 7.0.9-1.1.1.EL3 | RHSA-2007:0021 |
| RHEL 3 | acroread-libs-atk | 1.8.0-1.el3 | RHSA-2007:0021 |
| RHEL 3 | acroread-libs-glib2 | 2.4.7-1 | RHSA-2007:0021 |
| RHEL 3 | acroread-libs-gtk2 | 2.4.13-1.el3 | RHSA-2007:0021 |
| RHEL 3 | acroread-libs-gtk2-engines | 2.2.0-1.el3 | RHSA-2007:0021 |
| RHEL 3 | acroread-libs-pango | 1.6.0-1.el3 | RHSA-2007:0021 |
Advisories 2
- RHSA-2007:0017 Red Hat Security Advisory: Adobe Acrobat Reader security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0021 Red Hat Security Advisory: Adobe Acrobat Reader security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2007-0115 vdb-entry
- RHSA-2007:0021 vendor-advisory
- 23691 third-party-advisory
- 21981 vdb-entry
- RHSA-2007:0017 vendor-advisory
- 31316 vdb-entry
- 23882 third-party-advisory
- 20070110 Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite mailing-list
- 23666 third-party-advisory
- http://www.piotrbania.com/all/adv/adobe-acrobat-adv.txt
- SUSE-SA:2007:011 vendor-advisory
- 102847 vendor-advisory
- ADV-2007-0957 vdb-entry
- 23812 third-party-advisory
- 23877 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-01.html
- oval:org.mitre.oval:def:11698 vdb-entry signature
- GLSA-200701-16 vendor-advisory
- 24533 third-party-advisory
- 1017491 vdb-entry
- VU#698924 third-party-advisory
- 20070109 Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite mailing-list