The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30475, 2017.011.30120, or 2019.010.20091. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful     exploitation could lead to arbitrary code execution . (CVE-2019-7020, CVE-2019-7085)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability.
    Successful exploitation could lead to information disclosure. (CVE-2019-7089)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful     exploitation could lead to arbitrary code execution . (CVE-2019-7080)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have an integer overflow vulnerability. Successful     exploitation could lead to information disclosure. (CVE-2019-7030)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful     exploitation could lead to information disclosure. (CVE-2019-7021, CVE-2019-7022, CVE-2019-7023,     CVE-2019-7024, CVE-2019-7028, CVE-2019-7032, CVE-2019-7033, CVE-2019-7034, CVE-2019-7035, CVE-2019-7036,     CVE-2019-7038, CVE-2019-7045, CVE-2019-7047, CVE-2019-7049, CVE-2019-7053, CVE-2019-7055, CVE-2019-7056,     CVE-2019-7057, CVE-2019-7058, CVE-2019-7059, CVE-2019-7063, CVE-2019-7064, CVE-2019-7065, CVE-2019-7067,     CVE-2019-7071, CVE-2019-7073, CVE-2019-7074, CVE-2019-7081)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and     2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation. (CVE-2018-19725)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability. Successful     exploitation could lead to privilege escalation. (CVE-2019-7041)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful     exploitation could lead to arbitrary code execution . (CVE-2019-7019, CVE-2019-7027, CVE-2019-7037,     CVE-2019-7039, CVE-2019-7052, CVE-2019-7060, CVE-2019-7079)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful     exploitation could lead to arbitrary code execution . (CVE-2019-7069, CVE-2019-7086, CVE-2019-7087)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have an untrusted pointer dereference vulnerability.
    Successful exploitation could lead to arbitrary code execution . (CVE-2019-7042, CVE-2019-7046,     CVE-2019-7051, CVE-2019-7054, CVE-2019-7066, CVE-2019-7076)

  - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113     and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful     exploitation could lead to arbitrary code execution . (CVE-2019-7018, CVE-2019-7025, CVE-2019-7026,     CVE-2019-7029, CVE-2019-7031, CVE-2019-7040, CVE-2019-7043, CVE-2019-7044, CVE-2019-7048, CVE-2019-7050,     CVE-2019-7062, CVE-2019-7068, CVE-2019-7070, CVE-2019-7072, CVE-2019-7075, CVE-2019-7077, CVE-2019-7078,     CVE-2019-7082, CVE-2019-7083, CVE-2019-7084)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)

critical Nessus Plugin ID 122252

No changelogs found