Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.

The remote host is affected by the vulnerability described in GLSA-201308-03 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Reader. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file, possibly resulting in arbitrary code execution or a Denial of       Service condition. A local attacker could gain privileges via unspecified       vectors.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities :

  - An unspecified stack-based buffer overflow condition     exists that allows an attacker to execute arbitrary     code. (CVE-2012-2049)

  - An unspecified buffer overflow condition exists that     allows an attacker to execute arbitrary code.
    (CVE-2012-2050)

  - Multiple unspecified memory corruption issues exist that     allow an attacker to execute arbitrary code or cause a     denial of service. (CVE-2012-2051, CVE-2012-4147,     CVE-2012-4148, CVE-2012-4149, CVE-2012-4150,     CVE-2012-4151, CVE-2012-4152, CVE-2012-4153,     CVE-2012-4154, CVE-2012-4155, CVE-2012-4156,     CVE-2012-4157, CVE-2012-4158, CVE-2012-4159,     CVE-2012-4160, CVE-2012-4161, CVE-2012-4162)

  - An unspecified heap-based buffer overflow condition     exists that allows an attacker to execute arbitrary     code. (CVE-2012-1525)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack-based buffer overflow error     exists. (CVE-2012-2049)

  - An unspecified buffer overflow error exists.
    (CVE-2012-2050)

  - Numerous unspecified memory corruption errors exist.
    (CVE-2012-2051, CVE-2012-4147, CVE-2012-4148,     CVE-2012-4149, CVE-2012-4150, CVE-2012-4151,     CVE-2012-4152, CVE-2012-4153, CVE-2012-4154,     CVE-2012-4155, CVE-2012-4156, CVE-2012-4157,     CVE-2012-4158, CVE-2012-4159, CVE-2012-4160)

  - An unspecified heap-based buffer overflow error     exists. (CVE-2012-1525)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack-based buffer overflow error     exists. (CVE-2012-2049)

  - An unspecified buffer overflow error exists.
    (CVE-2012-2050)

  - Numerous unspecified memory corruption errors exist.
    (CVE-2012-2051, CVE-2012-4147, CVE-2012-4148,     CVE-2012-4149, CVE-2012-4150, CVE-2012-4151,     CVE-2012-4152, CVE-2012-4153, CVE-2012-4154,     CVE-2012-4155, CVE-2012-4156, CVE-2012-4157,     CVE-2012-4158, CVE-2012-4159, CVE-2012-4160)

  - An unspecified heap-based buffer overflow error     exists. (CVE-2012-1525)

ID	Name	Product	Family	Severity
69454	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
61563	Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
61562	Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)	Nessus	Windows	critical
61561	Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)	Nessus	Windows	critical

Detections

Analytics

CVE-2012-4155

high

Tenable Plugins

critical

critical

critical

critical