The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to     arbitrary code execution . (CVE-2020-9715, CVE-2020-9722)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation     could lead to memory leak. (CVE-2020-9697)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation . (CVE-2020-9714)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could     lead to arbitrary code execution . (CVE-2020-9693, CVE-2020-9694)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     security feature bypass. (CVE-2020-9696, CVE-2020-9712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48) (macOS)

high Nessus Plugin ID 139579

Version 1.8