Rabu, 11 Juli 2018

Kerentanan pada Adobe Acrobat Reader - Patching Juli 2018



Ternyata tidak hanya flash player saja, adobe acrobat reader pun hari ini mengeluarkan update untuk menutupi lubang celah keamanannya, namun saya lihat 10 juli 2018 ini di release langsung 3 celah keamanaan yang ditambal :

2018-07-10

Bugtraq ID: 104704
Class: Input Validation Error
CVE: CVE-2018-12802
Remote: Yes
Local: No
Published: Jul 10 2018 12:00AM
Updated: Jul 10 2018 12:00AM

1. Adobe Acrobat and Reader CVE-2018-12802 Security Bypass Vulnerability

Adobe Acrobat and Reader are prone to a security-bypass vulnerability.

Attackers can exploit these issues to bypass certain security restrictions and perform unauthorized actions; this may result in gaining elevated privileges.


2. Adobe Acrobat and Reader APSB18-21 Multiple Heap Buffer Overflow Vulnerabilities

Adobe Acrobat and Reader are prone to multiple heap-based buffer-overflow vulnerabilities.

Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

3. Adobe Acrobat and Reader APSB18-21 Multiple Information Disclosure Vulnerabilities

Adobe Acrobat and Reader are prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information that may aid in further attacks.


Untuk teman semua, harap untuk melakukan update adobe acrobat reader nya segera, cara nya buka adobe acrobat reader - pilih menu "Help" - Pilih menu "Check For Update"



Semoga bermanfaat untuk pembaca semua.

Dony Ramansyah
site : http://donyramansyah.net
blog : dony-ramansyah.blogspot.com
email : dony.ramansyah[at]gmail.com
Registered linux user : ID 40017

Tidak ada komentar: