The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30456, 2017.011.30105, or 2019.008.20071. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and     2015.006.30452 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation. (CVE-2018-15966)

  - Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and     2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead     to arbitrary code execution. (CVE-2018-12759, CVE-2018-12860, CVE-2018-12861, CVE-2018-12862,     CVE-2018-12864, CVE-2018-12865, CVE-2018-12868, CVE-2018-15928, CVE-2018-15929, CVE-2018-15933,     CVE-2018-15934, CVE-2018-15935, CVE-2018-15936, CVE-2018-15938, CVE-2018-15939, CVE-2018-15940,     CVE-2018-15941, CVE-2018-15944, CVE-2018-15945, CVE-2018-15952, CVE-2018-15954, CVE-2018-15955)

  - Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and     2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. (CVE-2018-12834, CVE-2018-12839, CVE-2018-12843, CVE-2018-12844, CVE-2018-12845,     CVE-2018-12856, CVE-2018-12857, CVE-2018-12859, CVE-2018-12866, CVE-2018-12867, CVE-2018-12869,     CVE-2018-12870, CVE-2018-12871, CVE-2018-12872, CVE-2018-12873, CVE-2018-12874, CVE-2018-12875,     CVE-2018-12878, CVE-2018-12879, CVE-2018-12880, CVE-2018-15922, CVE-2018-15923, CVE-2018-15925,     CVE-2018-15926, CVE-2018-15927, CVE-2018-15932, CVE-2018-15942, CVE-2018-15943, CVE-2018-15946,     CVE-2018-15947, CVE-2018-15948, CVE-2018-15949, CVE-2018-15950, CVE-2018-15953, CVE-2018-15956,     CVE-2018-15968, CVE-2018-19722)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who     requested this candidate did not associate it with any vulnerability during 2018. Notes: none     (CVE-2018-15921, CVE-2018-15977)

  - Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and     2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to     arbitrary code execution. (CVE-2018-12832, CVE-2018-12833, CVE-2018-12836, CVE-2018-12837, CVE-2018-12846,     CVE-2018-12847, CVE-2018-12851)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Acrobat < 2015.006.30456 / 2017.011.30105 / 2019.008.20071 Multiple Vulnerabilities (APSB18-30)

high Nessus Plugin ID 117876

Version 1.11

Version 1.10

Version 1.8

Version 1.11 Nov 20, 2024, 8:07 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411202007
Version 1.10 Sep 13, 2024, 10:17 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202409131017
Version 1.8 Aug 1, 2024, 8:06 AM CVSSv2 score source (changed from "CVE-2018-15955" to "CVE-2018-15966") Plugin Feed: 202408010806