Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Adobe Reader Multiple Vulnerabilities-01 Dec14 (MAC OS X)

Information

Severity

Severity

Critical

Family

Family

General

CVSSv2 Base

CVSSv2 Base

10.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

9 years ago

Modified

Modified

5 years ago

Summary

The host is installed with Adobe Reader and is prone to multiple vulnerabilities.

Insight

Insight

Multiple Flaws are due to, - Multiple use-after-free errors can be exploited to execute arbitrary code. - Multiple unspecified errors can be exploited to cause a heap-based buffer overflow and subsequently execute arbitrary code. - A Race condition in the MoveFileEx call hook feature allows attackers to bypass a sandbox protection mechanism. - An error within the implementation of a Javascript API can be exploited to disclose certain information. - Multiple integer overflow errors can be exploited to execute arbitrary code.

Affected Software

Affected Software

Adobe Reader 10.x before 10.1.13 and Adobe Reader 11.x before 11.0.10 on MAC OS X.

Detection Method

Detection Method

Checks if a vulnerable version is present on the target host.

Solution

Solution

Upgrade to Adobe Reader version 10.1.13 or 11.0.10 or later.