The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30680 or 24.003.20112. It is, therefore, affected by multiple vulnerabilities.

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Use After Free vulnerability that could result in arbitrary code execution in the context of the current     user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2024-41869)

  - Use After Free potentially leading to Arbitrary code execution (CVE-2024-41869)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current     user. This issue occurs when a resource is accessed using a type that is not compatible with the actual     object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2024-45112)

  - Access of Resource Using Incompatible Type ('Type Confusion') potentially leading to Arbitrary code     execution (CVE-2024-45112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 20.005.30680 / 24.003.20112 Multiple Vulnerabilities (APSB24-70)

high Nessus Plugin ID 207072

Version 1.4