Security bulletin

Prenotification Security Advisory for Adobe Reader and Acrobat

Release date: November 12, 2010

Vulnerability identifier: APSB10-28

Platform: All Platforms

Summary

Adobe is planning to release updates for Adobe Reader 9.4 and earlier 9.x versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.4 and earlier 9.x versions for Windows and Macintosh to resolve critical security issues, including CVE-2010-3654 noted in Security Advisory APSA10-05, CVE-2010-4091 referenced in the Adobe PSIRT blog ("Potential issue in Adobe Reader"), and the Adobe Flash Player update as noted in Security Bulletin APSB10-26. Adobe expects to make updates for Windows and Macintosh available on Tuesday, November 16, 2010. An update for UNIX is expected to be available on Monday, November 30, 2010.

Note that these updates represent an out-of-cycle release. Adobe is currently scheduled to release the next quarterly security updates for Adobe Reader and Acrobat on February 8, 2011.

Users may monitor the latest information on the Adobe Product Security Incident Response Team blog at http://blogs.adobe.com/psirt or by subscribing to the RSS feed here: http://blogs.adobe.com/psirt/atom.xml.

(Note: This Security Advisory will be replaced with the Security Bulletin upon release of the updates, currently expected on Tuesday, November 16, 2010.)

Affected software versions

Adobe Reader 9.4 and earlier 9.x versions for Windows, Macintosh, and UNIX
Adobe Acrobat 9.4 and earlier 9.x versions for Windows and Macintosh

Severity rating

Adobe categorizes these as critical updates.