Security → Adobe Reader/Adobe Acrobat Security Updates now available

With reference to the Prenotification of Quarterly Security Updates and the Security Advisory ,
updates are posted:

Adobe Reader for Windows:
»www.adobe.com/support/do ··· =Windows

Adobe Reader for Mac
»www.adobe.com/support/do ··· acintosh

Acrobat for Windows
»www.adobe.com/support/do ··· =Windows

Acrobat for Macintosh
»www.adobe.com/support/do ··· acintosh

Acrobat 3D for Windows
»www.adobe.com/support/do ··· =Windows

The Bulletin with further information and Release Notes should be posted in due course.

Reader-Windows is available for Download from the ftp:
»ftp://ftp.adobe.com/pub/adobe/ ··· der/win/

Acrobat-Windows is available for download from the ftp:
»ftp://ftp.adobe.com/pub/adobe/ ··· bat/win/

(Adobe Reader 8.3, 9.45, 10.10 - 6/14/2011)

I have Adobe Reader 9.4.4. What is the difference between this and Adobe Reader X 10.0.1? I'm not sure what Adobe Reader X is? Is 'X' the newest version?

I have adobe reader X and find no update available as yet.

ReaderX has new "Protected Mode(sandbox)
ReaderX features: »www.adobe.com/products/r ··· res.html
First released Nov 2010: »blogs.adobe.com/adoberea ··· /2010/11
--
Gladiator Security Forum: www.gladiator-antivirus.com/

»ftp://ftp.adobe.com/pub/adobe/ ··· der/win/
--
Gladiator Security Forum: www.gladiator-antivirus.com/

Thanks chachazz!

TH

I meant I found no update for Acrobat X using the internal updater. Probably will wait for that giving that I have had several problems when updating Reader previously.

Nothing in my v9.4.4 installations at work too. Let's know if it comes out!
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

Thanks for the links, etc chachazz this hopefully will make the transition a little less painful than it can be.

For those updating Adobe Reader 10.X (Sandbox) the update re-introduces an item to MSCONFIG that is User Choice and may depend on how your fetched the update.

Thank you chachazz . Just got the update for Acrobat. It says:

quote:

---

The Adobe Acrobat 10.1 Pro and Standard update adds support for new platforms and mitigation for security issues (for details see Security Bulletin APSB11-16) while providing more overall stability. For more information regarding enhancements and issues addressed in this release, see the Release Notes. This update is cumulative and can be applied to version 10.0 of Acrobat Pro or Standard with or without patches 10.0.1, 10.0.2 or 10.0.3 already applied.

---

The update required a reboot. It was only available via direct download and not through the internal updater. The "Release Notes" link has not been updated and does not say anything about this version.

Thanks JM; the Release Notes are up (PDF) however no Bulletin posted yet.

Thanks.
Put in (both) Flash already.
I'll get to Reader tomorrow.

(Reader 10.1 downloaded .exe went down in size to 39 MB from 10.0's 48 MB ?)

Bulletin is now Published:

quote:

---

Security updates available for Adobe Reader and Acrobat
- Release date: June 14, 2011
- Vulnerability identifier: APSB11-16
- CVE numbers: CVE-2011-2094, CVE-2011-2095, CVE-2011-2096, CVE-2011-2097, CVE-2011-2098, CVE-2011-2099, CVE-2011-2100, CVE-2011-2101, CVE-2011-2102, CVE-2011-2103, CVE-2011-2104, CVE-2011-2105, CVE-2011-2106
- Platform: Windows and Macintosh

• These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2011-2094).

• These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2011-2095).

• These updates resolve a heap overflow vulnerability that could lead to code execution (CVE-2011-2096).

• These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2011-2097).

• These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2011-2098).

• These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2011-2099).

• These updates resolve a DLL loading vulnerability that could lead to code execution (CVE-2011-2100).

• These updates resolve a cross document script execution vulnerability that could lead to code execution (CVE-2011-2101).

• These updates resolve a security bypass vulnerability (CVE-2011-2102).
Note: Update is for Adobe Reader and Acrobat X (10.x) only.

• These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2011-2103).
Note: Affects 8.x versions only.

• These updates resolve a memory corruption denial of service (CVE-2011-2104).

• These updates resolve a memory corruption (CVE-2011-2105

• These updates resolve a memory corruption vulnerability that could lead to code execution (Macintosh only) (CVE-2011-2106).

These updates also incorporate the Adobe Flash Player update as noted in Security Bulletin APSB11-12 and Security Bulletin APSB11-13.

The next quarterly security updates for Adobe Reader and Acrobat are currently scheduled for September 13, 2011.

---

Full Bulletin: »www.adobe.com/support/se ··· -16.html
--
Gladiator Security Forum: www.gladiator-antivirus.com/

This is not cool, I got the update to my wife's Vista laptop but not with W7 64 bit through the program updater, it shows no update yet.

Thanks chachazz.

You might try it again. I was able to get the update through Adobe X | Check for Updates.

Nope, I'll wait a bit, if not, I'll upgrade through the manual updater.

Use the old Other versions link, bluepoint I'm showing 10.1.0 offered for Vista.

I got the internal updater to work with Vista but not with W7 64 bit. Thanks for the link I have another option aside from the ftp site.

Thanks!

You're welcome, bluepoint

thanks for the notice.. all up to date now here. My Acrobat 8 pro, and reader x are now current.

I kept checking for updates yesterday, and they were not available to me until later in the day, after I had done the MS updates. That's probably just as well. Thanks for heads up.
--
Don't let the pluperfect be the enemy of the perfect.

Yes it was a fun evening in my household last night. 6 PC's updated Reader, Flash and installed the MS Updates. But all is well.
--
A bad picture is better than no picture at all.
»www.flickr.com/photos/26 ··· 858@N08/

I am still running Adobe Reader 9.4.0 and then I in stalled Patch/Update 9.4.5. I have all the patches for this version from 9.4.1 to 9.4.5. My question is, is there any way to install all these patches for version 9.4.0 all at once without having to install them one by one from their own setup file? I just want to save time as possible with a new PC to be prepared....

So, kind of like an installer package of some sort of thing like that. Is there any way to do this? It would be like the Windows Update ROLLUPS...Its an all-in-one installer package which includes ALL the patches and update in ONE package.

Thx.

Interesting Linux is still at v9.4.2 and no updated versions.

quote:

---

(Reader 10.1 downloaded .exe went down in size to 39 MB from 10.0's 48 MB ?)

---

Appears that 10.0 already had a separate "1001" patch file incorporated into the 10.0 release. Expanded, that patch, AdbeRdrUpd1001_Tier1.msp is ~12 MB in size.

Reader 10.1 installs another service in windows.... armsvc that is set to automatic and checks for updates. I changed it to manual since I don't need another unnecessary service in the tasklist.