A malicious file must be loaded in Adobe Reader by the end user for an attacker to exploit these vulnerabilities. These vulnerabilities have been assigned a critical severity rating. Additional vulnerabilities have been identified in versions 7.0.8 and earlier of Adobe Reader and Acrobat that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system. This vulnerability, previously reported in APSA07-01 on January 4, 2007, has been assigned an important severity rating. An update is available for a cross-site scripting (XSS) vulnerability in versions 7.0.8 and earlier of Adobe Reader and Acrobat that could allow remote attackers to inject arbitrary JavaScript into a browser session. This Security Bulletin addresses several vulnerabilities, including issues that have already been disclosed. Janu This Security Bulletin provides a solution for the issue originally documented in Security Advisory APSA07-01 on January 4, 2007, as well as other issues. Janu Updated to reflect the availability of Adobe Reader and Acrobat 6.0.6 for Windows.

Platform: All Platforms Affected software versionsĪdobe Acrobat Standard, Professional and Elements 7.0.8 and earlier versions

Adobe acrobat 7.0 professional upgrade