Does APSB08-19 apply to Acrobat 7.1.0 Pro?

Question

The bulletin says the vulnerability applies to:
Adobe Reader 8.1.2 and earlier versions
Adobe Acrobat Professional, 3D and Standard 8.1.2 and earlier versions
It does not specifically say Adobe Acrobat 7.x is not vulnerable.
Support can't answer the question for me.
Has anyone found a specific answer for this question and Acrobat 7.x?

Answer 1

From: <[email protected]><br /><br />| David,<br /><br />| Please do not post links not related to the topic at hand. Here it is considered spam<br />| or advertising, is against forum policy and is generally frowned upon.<br /><br />| Your understanding and cooperation is appreciated. Thanks!<br /><br />| Neil<br />| Forum Host<br /><br />Realize that I am using a news client accessing the NNTP server and I am bouncing all <br />over;  Usenet, Adobe server, Gmane, Microsoft, yada, yada...<br /><br />As forum host, how about answering Elaine_Lung's query about what versions of Acrobat are <br />vulnerable.  Is there even an Adobe group specific to handling Information Assurance <br />concerns ?<br /><br />I am seeing 100's of PDF exploits using the Collab.collectEmailInfo() function created by <br />a dozen or so "kits" such as El Fiesta.<br />Now I am also seeing exploits using util.printf()  Gotta love those highly obfuscated <br />shellcodes in the exploitation vector.<br />Do you realize the SHEAR NUMBER of people getting infected through these exploits ?<br /><br />How about the fact that Acrobat 9 LifeCycle Designer includes a very vulnerable version of <br />Sun Java when it could very well use the Sun Java installed into the OS ?  I called <br />Techical Support and left my OFFICIAL email address and I have an open Adobe Ticket <br />number.  Nobody has ever contacted me in regards to my open ticket.  My PC is using Sun <br />Java v6 update 10.  Acrobat 9 installs v5 update 11 !<br /><br />I could also bring up the inclusion of Adobe Air where "Exploitation of this vulnerability <br />may allow a remote attacker to execute JavaScript code with elevated privileges." <br />http://www.adobe.com/support/security/bulletins/apsb08-23.html<br />C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air<br /><br />Which is also bundled in Adobe Reader v9 without the knowledge of those who download it <br />and the vulnerable version is STILL available on the FTP server ftp:// <br />ftp.adobe.com/pub/adobe/reader/win/9.x/9.0/enu/AdbeRdr90_en_US.exe<br /><br />And there's Adobe Flash...  It it has be updated for IA complaince so often my head spins.<br /><br />Those links that are considered "spam" are for all those people on the Internet who have <br />to remove malware created by malicious actors taking advantage of all those <br />vulnerabilities.<br /><br />I have manually removed my URLs from my signature.  I will see if it is possible to base <br />my posting signature upon what News Server I post to.<br /><br />-- <br />Dave