Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.9 or 11.0.6. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2014-0493,     CVE-2014-0495)

  - A use-after-free error exists that allows an attacker to     execute arbitrary code. (CVE-2014-0496)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Mac OS X host is a version prior to 10.1.9 / 11.0.6.  It is, therefore, potentially affected by the following vulnerabilities :

  - Memory corruption vulnerabilities exist that could lead     to code execution. (CVE-2014-0493, CVE-2014-0495)

  - A use-after-free vulnerability exists that could lead to     code execution. (CVE-2014-0496)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.9 / 11.0.6.  It is, therefore, affected by multiple vulnerabilities :

  - Memory corruption vulnerabilities exist that could lead     to code execution. (CVE-2014-0493, CVE-2014-0495)

  - A use-after-free vulnerability exists that could lead to     code execution. (CVE-2014-0496)

The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.9 / 11.0.6.  It is, therefore, affected by multiple vulnerabilities :

  - Memory corruption vulnerabilities exist that could lead     to code execution. (CVE-2014-0493, CVE-2014-0495)

  - A use-after-free vulnerability exists that could lead to     code execution. (CVE-2014-0496)

ID	Name	Product	Family	Severity
71949	Adobe Reader < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
71948	Adobe Acrobat < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
71947	Adobe Reader < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01)	Nessus	Windows	critical
71946	Adobe Acrobat < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01)	Nessus	Windows	critical

Detections

Analytics

CVE-2014-0493

high

Tenable Plugins

critical

critical

critical

critical