The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0945. (CVE-2016-0946)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0946. (CVE-2016-0945)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0944)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0942)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory     corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933,     CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
    (CVE-2016-0939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)

critical Nessus Plugin ID 87918

Version 1.14

Version 1.13

Version 1.14 Nov 20, 2024, 8:07 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411202007
Version 1.13 Oct 21, 2024, 9:21 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin categorization ("Agent" set to "windows") Plugin metadata Plugin Feed: 202410212121