CVE-2001-1069: libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-w...

Security readout for executives and security teams

On Linux, Adobe Acrobat Reader could create a font list file with permissions allowing any local user to change it. That may let another account influence Acrobat Reader behavior for a victim user. The available sources do not show remote exploitation, active exploitation, or a confirmed patch. Exposure is most plausible on legacy multi-user Linux systems that still have Adobe Acrobat Reader for Linux installed. Single-user endpoints and systems without acroread are unlikely to be affected. The supplied affected-product metadata is incomplete. Treat this as a legacy hygiene issue, not an internet-facing emergency. Prioritize removal or containment if acroread still exists on shared Linux systems with untrusted users. Mitigation focus: Inventory Linux systems and user profiles where Adobe Acrobat Reader for Linux, acroread, remains installed.; Check Adobe or distribution guidance for historical fixes or supported replacement paths.; Remove unsupported acroread installations where business use no longer requires them..

Prepared

Jun 30, 2026, 04:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.