Thank you for your bug report. I confirmed the bug because the CVE exists and seems to apply to the version(s) in Ubuntu.
For future bug reports: You can mark bugs as "security bugs" yourself (that will subscribe the Ubuntu Security Team) and you can also link a CVE. I now did this for this report. ** Changed in: acroread (Ubuntu) Status: New => Confirmed -- Adobe Reader and Acrobat Font Parsing Buffer Overflow Vulnerability https://bugs.launchpad.net/bugs/655747 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs