Prenotification Security Advisory for Adobe Acrobat and Reader

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2017.0051
      Prenotification Security Advisory for Adobe Acrobat and Reader
                              6 January 2017

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           Adobe Acrobat and Reader
Publisher:         Adobe
Operating System:  Windows
                   OS X
Impact/Access:     Reduced Security -- Unknown/Unspecified
Resolution:        Patch/Upgrade
CVE Names:         CVE-2016-6937  

Original Bulletin: 
   https://helpx.adobe.com/security/products/acrobat/apsb17-01.html

- --------------------------BEGIN INCLUDED TEXT--------------------

Adobe Security Bulletin

Prenotification Security Advisory for Adobe Acrobat and Reader

Release date: January 5, 2017

Vulnerability identifier: APSB17-01

Priority: 2

Platform: Windows and Macintosh
CVE-2016-6937
CVE-2016-6937

Summary

Adobe is planning to release security updates for Adobe Acrobat and Reader
for Windows and Macintosh on Tuesday, January 10, 2017.

Users may monitor the latest information on the Adobe Product Security
Incident Response Team (PSIRT) blog at https://blogs.adobe.com/psirt.

(Note: This Security Advisory will be replaced with the Security Bulletin
upon release of the update.)

Affected Versions

These updates will address critical vulnerabilities in the software. Adobe
will be assigning the following priority ratings to these updates:

Product			Track		Affected Versions			Platform		Priority	Rating
Acrobat DC		Continuous	15.020.20042 and earlier versions	Windows and Macintosh	2
Acrobat Reader DC	Continuous	15.020.20042 and earlier versions	Windows and Macintosh	2
Acrobat DC		Classic		15.006.30244 and earlier versions	Windows and Macintosh	2
Acrobat Reader DC	Classic		15.006.30244 and earlier versions	Windows and Macintosh	2
Acrobat XI		Desktop		11.0.18 and earlier versions		Windows and Macintosh	2
Reader XI		Desktop		11.0.18 and earlier versions		Windows and Macintosh	2

For more information on Adobe Acrobat DC, please visit
https://helpx.adobe.com/acrobat/faq.html.

For more information on Adobe Acrobat Reader DC, please visit
https://helpx.adobe.com/reader/faq.html.

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBWG74CIx+lLeg9Ub1AQiw/A//TbsSPdouY97Bvs0FC6Wbc/YgSoNac5nr
WMHzzNbJJQ/jBSE/Igya8yzcm3FDKCA6w8ooqlSJmHttJd3X8DbBog+9WfwMsaHn
czRafSjfbD+J+pFbK8/3/pmLdwE8VJXs7CbEQoJyVNDAokpF+fRRs6zLE+f9zm8N
AW3qpI8IRNP8iwBk+DgBtX/b7rj0Y81rao54AQpuf1iHMgjgk1LFJ+SXE0oG9Npb
92cQAMj6OJGTJzMMAr/zkWuVisrF9yv4SGSjv57cdzmkfzLLxQ6GEfIM307759WP
YuQdggyBRBdIRVpmSJJ3SuZMVkO+MvTpvU5RXvxa//b/3cw08sZR7TIvoSfSiTm2
TrP0q6y37a/Or0JlPBQ7SDnYUWtLNeSPpV/lfj1vOioMbCJaApWyuQvVQC8J6VMp
T0Z6GugJLaFGnmtFzVg29T0nbVwHnPVDPBwVoLq4NEBjwV48JO/EXcpGcWFdn9nU
MxxhxLHJGl/81t/jGjxf7IWKpktKl9qQ3WFIHkNumhgG9pN+xQd8zimvSqKSEODP
Ih0LPlZOu1a0dFgZ/xQ7TGthaPuMuw+Cisz7GV8FFiTpmmTW0WAaDkWYUKI3ldjw
GLMmN0QdCex1X4s52rYVkGr/z8JhvWjvBjFs3LVqozDMIWbNBQiCYDT9sXmUH8VP
OzuG2uSI5Ns=
=kWK5
-----END PGP SIGNATURE-----