The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30172 or 15.016.20039. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and     Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass     JavaScript API execution restrictions via unspecified vectors, a different vulnerability than     CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, and     CVE-2016-1062. (CVE-2016-1117)

  - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and     Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass     JavaScript API execution restrictions via unspecified vectors, a different vulnerability than     CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, and     CVE-2016-1117. (CVE-2016-1062)

  - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and     Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass     JavaScript API execution restrictions via unspecified vectors, a different vulnerability than     CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1062, and     CVE-2016-1117. (CVE-2016-1044)

  - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and     Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass     JavaScript API execution restrictions via unspecified vectors, a different vulnerability than     CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1044, CVE-2016-1062, and     CVE-2016-1117. (CVE-2016-1042)

  - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and     Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass     JavaScript API execution restrictions via unspecified vectors, a different vulnerability than     CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and     CVE-2016-1117. (CVE-2016-1041)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14)

critical Nessus Plugin ID 91097

Version 1.13