Giorgio Fedon

**Name of the Vulnerable Software and Affected Versions** Red Hat JBoss Enterprise Application Platform versions 4.2 through 4.2.0.CP08 and versions 4.3 through 4.3.0.CP07 **Description** The issue is related to insufficient access control in the JMX-Console web application. This allows remote attackers to send requests to the application's handler using a different method, potentially disclosing protected information. **Recommendations** For versions 4.2 through 4.2.0.CP08, update to version 4.2.0.CP09 or later. For versions 4.3 through 4.3.0.CP07, update to version 4.3.0.CP08 or later. As a temporary workaround, consider restricting access to the JMX-Console web application until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Adobe Acrobat Reader Plugin versions prior to 8.0.0 Adobe Reader versions prior to 7.1.4 Adobe Reader versions prior to 8.1.7 Adobe Reader versions prior to 9.2 **Description** The issue allows remote attackers to cause a denial of service, specifically memory consumption, when a long sequence of # (hash) characters is appended to a PDF URL. This is related to a cross-site scripting issue and can occur when the plugin is used with browsers such as Internet Explorer, Google Chrome, or Opera. **Recommendations** For Adobe Acrobat Reader Plugin version prior to 8.0.0, update to version 8.0.0 or later. For Adobe Reader version prior to 7.1.4, update to version 7.1.4 or later. For Adobe Reader version prior to 8.1.7, update to version 8.1.7 or later. For Adobe Reader version prior to 9.2, update to version 9.2 or later.