Description
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 8.1.2.SU1-2.el5 | RHSA-2008:0641 |
| RHEL 4 | acroread +1 | 8.1.2.SU1-2.el4 | RHSA-2008:0641 |
| RHEL 3 | acroread +1 | 8.1.2.SU1-2 | RHSA-2008:0641 |
Advisories 1
- RHSA-2008:0641 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2008-2289 vdb-entry
- 28091 vdb-entry
- 29242 third-party-advisory
- GLSA-200803-26 vendor-advisory
- SUSE-SR:2008:005 vendor-advisory
- 29425 third-party-advisory
- 31352 third-party-advisory
- 29229 third-party-advisory
- 240106 vendor-advisory
- http://www.adobe.com/support/security/advisories/apsa08-02.html
- adobe-reader-acroread-symlink(40987) vdb-entry
- RHSA-2008:0641 vendor-advisory
- 1019539 vdb-entry
- http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html
- 31136 third-party-advisory
- ADV-2008-0765 vdb-entry