# MA-280.062011: MyCERT Alert - Multiple Critical Vulnerabilities in Adobe Reader and Adobe Acrobat

**Date:** 15 Jun 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-280.062011  
**Advisory ID:** MA-280.062011

---

**1.0 Introduction**
Critical vulnerabilities have been identified in Adobe Reader X (10.0.1) and earlier versions for Windows, Adobe Reader X (10.0.3) and earlier versions for Macintosh, and Adobe Acrobat X (10.0.3) and earlier versions for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially execute arbitrary code on the affected system. [1]
**2.0 Impact**
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat and Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. [1]
**3.0 Affected Products**
Majority of the Adobe Reader and Adobe Acrobat versions are prone to these vulnerabilities. Below is the list of vulnerable products:
- Adobe Reader X (10.0.1) and earlier 10.x versions for Windows
- Adobe Reader X (10.0.3) and earlier 10.x versions for Macintosh
- Adobe Reader 9.4.4 and earlier 9.x versions for Windows and Macintosh
- Adobe Reader 8.2.6 and earlier 8.x versions for Windows and Macintosh
- Adobe Acrobat X (10.0.3) and earlier 10.x versions for Windows and Macintosh
- Adobe Acrobat 9.4.4 and earlier 9.x versions for Windows and Macintosh
- Adobe Acrobat 8.2.6 and earlier 8.x versions for Windows and Macintosh
**4.0 Recommendation**
Users can utilize the product's update mechanism. The default configuration is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
MyCERT advises users of the products mentioned in this advisory to keep themselves updated with the latest security announcements from the products' vendor. MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#c6abbfa5a3b4b286abbfa5a3b4b2e8a9b4a1e8abbf)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
i. <https://www.adobe.com/support/security/bulletins/apsb11-16.html>