Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory.

  - acroread: multiple code execution flaws (APSB11-16) (CVE-2011-2094, CVE-2011-2095, CVE-2011-2096,     CVE-2011-2097, CVE-2011-2098, CVE-2011-2099, CVE-2011-2101)

  - acroread: Multiple denial of service flaws (APSB11-16) (CVE-2011-2104, CVE-2011-2105)

  - flash-plugin: Cross-site scripting vulnerability (APSB11-13) (CVE-2011-2107)

  - flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) (CVE-2011-2130, CVE-2011-2134,     CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414,     CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2424, CVE-2011-2425)

  - acroread, flash-plugin: critical flaws fixed in APSB11-26 (CVE-2011-2426, CVE-2011-2427, CVE-2011-2428,     CVE-2011-2430)

  - acroread, flash-plugin: security control bypass information disclosure fixed in APSB11-26 (CVE-2011-2429)

  - acroread: multiple code execution flaws (APSB11-24) (CVE-2011-2431, CVE-2011-2432, CVE-2011-2433,     CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440,     CVE-2011-2442, CVE-2011-4374)

  - acroread, flash-plugin: Cross-site scripting vulnerability fixed in APSB11-26 (CVE-2011-2444)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1, 9.4.5, or 8.3. It is, therefore, affected by the following vulnerabilities :

  - Multiple buffer overflow conditions exist that allow an     attacker to execute arbitrary code. (CVE-2011-2094,     CVE-2011-2095, CVE-2011-2097)

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2011-2096)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2011-2098,     CVE-2011-2099, CVE-2011-2103, CVE-2011-2105,     CVE-2011-2106)

  - Multiple memory corruption issues exist that allow an     attacker to crash the application. (CVE-2011-2104,     CVE-2011-2105)

  - A DLL loading vulnerability exists that allows an     attacker to execute arbitrary code. (CVE-2011-2100)

  - A cross-document script execution vulnerability exists     that allows an attacker to execute arbitrary code.
    (CVE-2011-2101)

  - A unspecified vulnerability exists that allows an     attacker to bypass security restrictions. (CVE-2011-2102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is earlier than 10.1 / 9.4.5 / 8.3.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple buffer overflow vulnerabilities exist that     could lead to code execution. (CVE-2011-2094,     CVE-2011-2095, CVE-2011-2097)

  - A heap overflow vulnerability exists that could lead to     code execution. (CVE-2011-2096)

  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-2098,     CVE-2011-2099, CVE-2011-2103, CVE-2011-2105)

  - Multiple memory corruption vulnerabilities exist that     could cause the application to crash. (CVE-2011-2104,     CVE-2011-2105)

  - A DLL loading vulnerability exists that could lead to     code execution. (CVE-2011-2100)

  - A cross document script execution vulnerability exists     that could lead to code execution. (CVE-2011-2101)

  - A security bypass vulnerability exists that could lead     to bypassing security restrictions. (CVE-2011-2102)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1 / 9.4.5 / 8.3.  Such versions are reportedly affected by multiple vulnerabilities :

  - Multiple buffer overflow vulnerabilities exist that     could lead to code execution. (CVE-2011-2094,     CVE-2011-2095, CVE-2011-2097)

  - A heap overflow vulnerability exists that could lead to     code execution. (CVE-2011-2096)

  - Multiple memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2011-2098,     CVE-2011-2099, CVE-2011-2103, CVE-2011-2105)

  - Multiple memory corruption vulnerabilities exist that     could cause the application to crash. (CVE-2011-2104,     CVE-2011-2105)

  - A DLL loading vulnerability exists that could lead to     code execution. (CVE-2011-2100)

  - A cross document script execution vulnerability exists     that could lead to code execution. (CVE-2011-2101)

  - A security bypass vulnerability exists that could lead     to bypassing security restrictions. (CVE-2011-2102)

ID	Name	Product	Family	Severity
56740	RHEL 5 / 6 : acroread (RHSA-2011:1434)	Nessus	Red Hat Local Security Checks	medium
55421	Adobe Reader < 10.1 / 9.4.5 / 8.3 Multiple Vulnerabilities (APSB11-12, APSB11-12, APSB11-16) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
55144	Adobe Reader < 10.1 / 9.4.5 / 8.3 Multiple Vulnerabilities (APSB11-16)	Nessus	Windows	high
55143	Adobe Acrobat < 10.1 / 9.4.5 / 8.3 Multiple Vulnerabilities (APSB11-16)	Nessus	Windows	high

Detections

Analytics

CVE-2011-2101

high

Tenable Plugins

medium

high

high

high