Pier-Luc Maltais

**Name of the Vulnerable Software and Affected Versions** MantisBT versions prior to 2.26.1 **Description** MantisBT is an open source issue tracker. An unauthenticated attacker who knows a user's email address and username can hijack the user's account by poisoning the link in the password reset notification message. **Recommendations** For versions prior to 2.26.1, update to version 2.26.1 to resolve the issue. As a temporary workaround, define `$g path` as appropriate in `config inc.php`.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader and Adobe Reader Document Cloud (affected versions not specified) Adobe Acrobat and Adobe Acrobat Document Cloud (affected versions not specified) **Description** The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader and Adobe Reader Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat and Adobe Acrobat Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader and Adobe Reader Document Cloud (affected versions not specified) Adobe Acrobat and Adobe Acrobat Document Cloud (affected versions not specified) **Description** The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader and Adobe Reader Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat and Adobe Acrobat Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Digital Editions versions prior to 4.5.1 **Description** The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. **Recommendations** For versions prior to 4.5.1, update to version 4.5.1 or later to resolve the issue.