Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3353.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.4 or 10.1.8. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified stack overflow conditions exist     that allow an attacker to execute arbitrary code.
    (CVE-2013-3351)

  - Multiple unspecified memory corruption issues exist that     allow an attacker to execute arbitrary code.
    (CVE-2013-3352, CVE-2013-3354, CVE-2013-3355)

  - Multiple unspecified buffer overflow conditions exist     that allow an attacker to execute arbitrary code.
    (CVE-2013-3353, CVE-2013-3356)

  - Multiple unspecified integer overflow conditions exist     that allow an attacker to execute arbitrary code.
    (CVE-2013-3357, CVE-2013-3358)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is earlier than 11.0.4 / 10.1.8.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack overflow issue exists that could     lead to code execution. (CVE-2013-3351)

  - Unspecified memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2013-3352,     CVE-2013-3354, CVE-2013-3355)

  - Unspecified buffer overflow errors exist that could     lead to code execution. (CVE-2013-3353, CVE-2013-3356)

  - Unspecified integer overflow errors exist that could     lead to code execution. (CVE-2013-3357, CVE-2013-3358)

The version of Adobe Acrobat installed on the remote host is earlier than 11.0.4 / 10.1.8.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack overflow issue exists that could     lead to code execution. (CVE-2013-3351)

  - Unspecified memory corruption vulnerabilities exist that     could lead to code execution. (CVE-2013-3352,     CVE-2013-3354, CVE-2013-3355)

  - Unspecified buffer overflow errors exist that could     lead to code execution. (CVE-2013-3353, CVE-2013-3356)

  - Unspecified integer overflow errors exist that could     lead to code execution. (CVE-2013-3357, CVE-2013-3358)

ID	Name	Product	Family	Severity
69847	Adobe Reader < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
69846	Adobe Reader < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)	Nessus	Windows	critical
69845	Adobe Acrobat < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)	Nessus	Windows	critical

Detections

Analytics

CVE-2013-3356

high

Tenable Plugins

critical

critical

critical