The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30279 or 15.023.20053. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable type confusion vulnerability in the XSLT engine related to localization functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2962)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2950)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2951)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2955, CVE-2017-2958)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the     navigation pane. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2956)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to collaboration     functionality. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2957)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to validation functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2961)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2942)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2945)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing the segment for storing non-graphic information.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2946)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to     arbitrary code execution. (CVE-2017-2949)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color     profile metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2959)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed     TIFF segments. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2966)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2970)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2971)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2972)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2948)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing     tags in TIFF files. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2952)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing a malformed cross-reference table.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2939)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation     could lead to arbitrary code execution. (CVE-2017-2940)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2941)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2943)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2944)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF     image. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2953)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF     images. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2954)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF     metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2960)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the     color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution.
    (CVE-2017-2963)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of     JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2964)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file     parsing. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2965)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and     organization. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2967)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-3010)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     a security bypass vulnerability when manipulating Form Data Format (FDF). (CVE-2017-2947)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to     information disclosure. (CVE-2017-3009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 15.006.30279 or 15.023.20053. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable type confusion vulnerability in the XSLT engine related to localization functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2962)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2950)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2951)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2955, CVE-2017-2958)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the     navigation pane. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2956)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to collaboration     functionality. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2957)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to validation functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2961)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2942)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2945)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing the segment for storing non-graphic information.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2946)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to     arbitrary code execution. (CVE-2017-2949)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color     profile metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2959)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed     TIFF segments. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2966)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2970)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2971)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2972)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2948)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing     tags in TIFF files. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2952)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing a malformed cross-reference table.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2939)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation     could lead to arbitrary code execution. (CVE-2017-2940)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2941)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2943)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2944)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF     image. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2953)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF     images. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2954)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF     metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2960)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the     color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution.
    (CVE-2017-2963)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of     JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2964)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file     parsing. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2965)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and     organization. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2967)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-3010)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     a security bypass vulnerability when manipulating Form Data Format (FDF). (CVE-2017-2947)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to     information disclosure. (CVE-2017-3009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモート Windows ホストにインストールされている Adobe Reader は、15.006.30279 または 15.023.20053より前です。したがって、複数の脆弱性の影響を受けます。

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、ローカライゼーション機能に関連する XSLT エンジンに悪用可能な型の取り違え (Type Confusion) の脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2962)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、レイアウト機能に関連する XFA エンジン内に悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2950)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、サブフォーム機能に関連する XFA エンジン内に悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2951)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、JavaScript エンジンに悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2955、CVE-2017-2958)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、ナビゲーションペインの操作に関連する JavaScript エンジンに悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2956)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、コラボレーション機能に関連する JavaScript エンジン内に悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2957)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、検証機能に関連する XFA エンジン内に悪用可能なメモリ解放後使用 (Use After Free) の脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2961)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF 画像データを解析する際に悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2942)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF 画像ファイルを解析する際に悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2945)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、非図形情報を保存するためのセグメントを解析する際に悪用可能なヒープオーバーフローの脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2946)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、XSLT エンジンに悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2949)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、カラープロファイルメタデータの解析に関連する画像変換エンジンに悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2959)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、無効な形式の TIFF セグメントの解析に関連する画像変換エンジンに悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2966)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、テンプレート操作に関連する XSLT エンジンに悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2970)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、JPEG デコーダールーチンに悪用可能なヒープオーバーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2971)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、JPEG 解析に関連する画像変換モジュールに悪用可能なメモリ破損の脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2972)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、XFA エンジンに悪用可能なバッファオーバーフロー / アンダーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2948)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF ファイルの解析タグに関連する画像変換モジュールに悪用可能なバッファオーバーフロー / アンダーフローの脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2952)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、無効な形式のクロスリファレンステーブルを処理する際に悪用可能なメモリ破損の脆弱性があります。
    悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2939)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、JPEG 2000 ファイルを処理する際に悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2940)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、コンパクトフォントフォーマットデータを処理する際に悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2941)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、TIFF 画像のタグを処理する際に悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2943)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、細工された TIFF 画像ファイルを解析する際に悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2944)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF 画像を処理する際の画像変換モジュールに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2953)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、無効な形式の TIFF 画像を処理する際の画像変換モジュールに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2954)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、EXIF メタデータの解析に関連する画像変換エンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2960)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF ファイルのカラープロファイルの処理に関連する画像変換エンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。
    (CVE-2017-2963)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、JPEG EXIF メタデータの解析に関連する画像変換エンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2964)

  - Adobe Acrobat Reader 15.020.20042 以前、15.006.30244 以前、11.0.18 以前のバージョンには、TIFF ファイルの解析に関連する画像変換エンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2965)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、フォームの構造や組織に関連する XFA エンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-2967)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、レンダリングエンジンに悪用可能なメモリ破損の脆弱性があります。悪用に成功すると、任意のコードが実行される可能性があります。(CVE-2017-3010)

  - Adobe Acrobat および Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、フォームデータフォーマット (FDF) を操作する際にセキュリティバイパスの脆弱性があります。(CVE-2017-2947)

  - Adobe Acrobat Reader のバージョン 15.020.20042 以前、15.006.30244 以前、11.0.18 以前には、JPEG2000 パーサーに悪用可能なバッファオーバーフローの脆弱性があります。悪用に成功すると、情報漏洩につながる可能性があります。(CVE-2017-3009)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートのWindowsホストにインストールされているAdobe Acrobatのバージョンは、11.0.19、15.006.30279、または15.023.20053より前です。したがって、以下の複数の脆弱性による影響を受けます。

  - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2017-2939, CVE-2017-2940, CVE-2017-2941, CVE-2017-2943, CVE-2017-2944, CVE-2017-2953, CVE-2017-2954)

  - Multiple heap buffer overflow conditions exist due to improper validation of unspecified input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2017-2942, CVE-2017-2945, CVE-2017-2959)

  - A heap buffer overflow condition exists when handling JPEG2000 images due to improper validation of unspecified input. 認証されていないリモート攻撃者がこの脆弱性を悪用し、任意のコードを実行する可能性があります。
    (CVE-2017-2946)

  - An unspecified security bypass vulnerability exists that allows an unauthenticated, remote attacker to have an unspecified impact. (CVE-2017-2947)

  - Multiple overflow conditions exist due to improper validation of unspecified input. 認証されていないリモートの攻撃者がこれらを悪用して、任意のコードを実行する可能性があります。（CVE-2017-2948、CVE-2017-2952）

  - A heap buffer overflow condition exists when handling the XSLT element-available() function that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2017-2949)

  - Multiple use-after-free memory errors exist when handling XFA subform layouts, hyphenation objects, field font sizes, and template objects. 認証されていないリモートの攻撃者がこれらを悪用して、任意のコードを実行する可能性があります。
    (CVE-2017-2950, CVE-2017-2951, CVE-2017-2961, CVE-2017-2967)

  - Multiple use-after-free memory errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. (CVE-2017-2955, CVE-2017-2956, CVE-2017-2957, CVE-2017-2958)

  - Multiple memory corruption issues exist when handling JPEG and TIFF files due to improper validation of unspecified input. 認証されていないリモートの攻撃者がこれらを悪用して、任意のコードを実行する可能性があります。
    (CVE-2017-2960, CVE-2017-2963, CVE-2017-2964, CVE-2017-2965)

  - A type confusion error exists when handling the XSLT lang() function that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2017-2962)

  - A heap buffer overflow condition exists in the ImageConversion component when handling TIFF images() due to improper validation of unspecified input. 認証されていないリモート攻撃者がこの脆弱性を悪用し、任意のコードを実行する可能性があります。 (CVE-2017-2966)

  - A buffer overflow condition exists in the JPEG2000 parser due to improper validation of unspecified input.
    認証されていないリモートの攻撃者がこれを悪用し、秘密情報を漏洩させる可能性があります。 (CVE-2017-3009)

  - A memory corruption issue exists in the Rendering engine due to improper validation of unspecified input. 認証されていないリモートの攻撃者がこれを悪用し、サービス拒否状態または任意のコードの実行を引き起こす可能性があります。 (CVE-2017-3010)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

远程 Windows 主机上安装的 Adobe Reader 版本低于 15.006.30279 或 15.023.20053。因此，该主机受到多个漏洞的影响。

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XSLT 引擎包含可遭利用的类型混淆漏洞，此漏洞与本地化功能相关。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2962)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XFA 引擎包含可遭利用的释放后使用漏洞，此漏洞与布局功能相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2950)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XFA 引擎包含可遭利用的释放后使用漏洞，此漏洞与子表单功能相关。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2951)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 JavaScript 引擎包含可遭利用的释放后使用漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。（CVE-2017-2955、CVE-2017-2958）

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 JavaScript 引擎包含可遭利用的释放后使用漏洞，此漏洞与导航窗格的操控相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2956)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 JavaScript 引擎包含可遭利用的释放后使用漏洞，此漏洞与协作功能相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2957)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XFA 引擎包含可遭利用的释放后使用漏洞，此漏洞与验证功能相关。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2961)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理 TIFF 图像数据时，会产生可遭利用的堆溢出漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2942)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理 TIFF 图像文件时，会产生可遭利用的堆溢出漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2945)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在解析用于存储非图形信息的段时，会产生可遭利用的堆溢出漏洞。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2946)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XSLT 引擎包含可遭利用的堆溢位漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2949)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的堆溢位漏洞，此漏洞与解析颜色配置文件的元数据相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2959)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的堆溢位漏洞，此漏洞与解析格式错误的 TIFF 段相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2966)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XSLT 引擎包含可遭利用的堆溢位漏洞，此漏洞与模板操控相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2970)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 JPEG 解码器例程包含可遭利用的堆溢位漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2971)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换模块包含可遭利用的内存损坏漏洞，此漏洞与 JPEG 文件的解析相关。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2972)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XFA 引擎包含可遭利用的缓冲区上溢/下溢漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2948)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换模块包含可遭利用的缓冲区上溢/下溢漏洞，此漏洞与解析 TIFF 文件中的标签相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2952)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理格式错误的交叉引用表时，会产生可遭利用的内存损坏漏洞。
    若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2939)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理 JPEG 2000 文件时，会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2940)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理压缩字体格式 (Compact Font Format) 数据时，会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2941)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理 TIFF 图像中的标签时，会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2943)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在解析特制的 TIFF 图像文件时，会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2944)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理 TIFF 图像文件时，图像转换模块中会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2953)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本在处理格式错误的 TIFF 图像文件时，图像转换模块中会产生可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2954)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的内存损坏漏洞，此漏洞与解析 EXIF 元数据相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2960)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的内存损坏漏洞，此漏洞与处理 TIFF 文件中的颜色配置文件相关。成功利用此漏洞可导致任意代码执行。
    (CVE-2017-2963)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的内存损坏漏洞，此漏洞与解析 JPEG EXIF 元数据相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2964)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的图像转换引擎包含可遭利用的内存损坏漏洞，此漏洞与 TIFF 文件的解析相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2965)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 XFA 引擎包含可遭利用的内存损坏漏洞，此漏洞与表格的结构和组织相关。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-2967)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的渲染引擎包含可遭利用的内存损坏漏洞。若攻击者成功利用此漏洞，可导致任意代码执行。(CVE-2017-3010)

  - 在 Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本中，操纵表单数据格式 (FDF) 可导致安全性绕过漏洞。(CVE-2017-2947)

  - Adobe Acrobat Reader 15.020.20042 及更早版本、15.006.30244 及更早版本、11.0.18 及更早版本的 JPEG2000 解析器包含可遭利用的缓冲区下溢漏洞。成功利用可能导致信息泄露。(CVE-2017-3009)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Windows 主機上安裝的 Adobe Reader 版本是 15.006.30279 之前的版本或 15.023.20053 版本。因此，會受到多個弱點影響。

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在與本地化功能有關的 XSLT 引擎中都有可利用的類型混淆弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2962)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在與佈局功能相關的 XFA 引擎中都有可利用的使用已釋放記憶體弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2950)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在與子表單功能相關的 XFA 引擎中都有可利用的使用已釋放記憶體弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2951)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在 JavaScript 引擎中都有可利用的使用已釋放記憶體弱點。成功利用此弱點可導致任意程式碼執行。(CVE-2017-2955、CVE-2017-2958)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關瀏覽窗格操作的 JavaScript 引擎中都有可利用的使用已釋放記憶體弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2956)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在協作功能相關的 JavaScript 引擎中都有可利用的使用已釋放記憶體弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2957)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在與驗證功能相關的 XFA 引擎中都有可利用的使用已釋放記憶體弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2961)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理 TIFF 影像資料時都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2942)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在剖析 TIFF 影像檔案時都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2945)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在剖析區段以便儲存非圖形資訊時都有可利用的堆積溢位弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2946)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在 XSLT 引擎中都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2949)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關色彩設定檔中繼資料剖析的影像轉換引擎中都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2959)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關剖析格式錯誤的 TIFF 區段的影像轉換引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2966)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關範本操作的 XSLT 引擎中都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2970)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在 JPEG 解碼器常式中都有可利用的堆積溢位弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2971)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關 JPEG 剖析的影像轉換引擎中都有可利用的記憶體毀損弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2972)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在 XFA 引擎中都有可利用的緩衝區溢位 / 下溢弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2948)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在與剖析 TIFF 檔案中的標籤有關的影像轉換模組中都有可利用的緩衝區溢位 / 下溢弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2952)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理格式錯誤的交互參照資料表時都有可利用的記憶體毀損弱點。
    若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2939)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理 JPEG 2000 檔案表時都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2940)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理壓縮字型格式資料時都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2941)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理 TIFF 影像中的標籤時都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2943)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在剖析特製 TIFF 影像檔案時都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2944)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理 TIFF 時，影像轉換模組中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2953)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理格式錯誤的 TIFF 影像時，影像轉換模組中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2954)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關剖析 EXIF 中繼資料的影像轉換引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2960)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關 GIF 檔案剖析的影像轉換引擎中都有可利用的記憶體毀損弱點。若遭惡意利用，可導致任意程式碼執行。
    (CVE-2017-2963)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關剖析 JPEG EXIF 中繼資料的影像轉換引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2964)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關 TIFF 檔案剖析的影像轉換引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2965)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在有關表單結構與組織的 XFA 引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-2967)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在渲染引擎中都有可利用的記憶體毀損弱點。若成功利用此弱點，則可執行任意程式碼。(CVE-2017-3010)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在處理表單資料格式 (FDF) 時都有一個安全性繞過弱點。(CVE-2017-2947)

  - Adobe Acrobat Reader 版本 15.020.20042 和更舊版本、15.006.30244 和更舊版本、11.0.18 和更舊版本在 JPEG2000 剖析器中都有可利用的緩衝區溢位弱點。若成功利用此弱點，可能導致資訊洩漏。(CVE-2017-3009)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機上安裝的 Adobe Acrobat 版本比 11.0.19、15.006.30279 或 15.023.20053 版舊。因此，會受到多個弱點影響：- 存在多個記憶體損毀問題，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用這些弱點執行任意程式碼。(CVE-2017-2939、CVE-2017-2940、CVE-2017-2941、CVE-2017-2943、CVE-2017-2944、CVE-2017-2953、CVE-2017-2954) - 存在多個堆積緩衝區溢位情形，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用這些弱點執行任意程式碼。(CVE-2017-2942、CVE-2017-2945、CVE-2017-2959) - 處理 JPEG2000 影像時，存在一個堆積緩衝區溢位情形，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用此弱點執行任意程式碼。(CVE-2017-2946) - 存在一個不明安全性繞過弱點，讓未經驗證的遠端攻擊者得以造成不明影響。(CVE-2017-2947) - 存在多個溢位情形，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用這些弱點執行任意程式碼。(CVE-2017-2948、CVE-2017-2952) - 處理 XSLT element-available() 函式時，存在一個堆積緩衝區溢位情形，會讓未經驗證的遠端攻擊者得以執行任意程式碼。(CVE-2017-2949) - 處理 XFA 子表單版面配置、斷字物件、欄位字型大小和範本物件時，存在多個釋放後使用記憶體錯誤。未經驗證的遠端攻擊者可利用這些弱點執行任意程式碼。(CVE-2017-2950、CVE-2017-2951、CVE-2017-2961、CVE-2017-2967) - 存在多個釋放後使用記憶體錯誤，讓未經驗證的遠端攻擊者得以執行任意程式碼。(CVE-2017-2955、CVE-2017-2956、CVE-2017-2957、CVE-2017-2958) - 處理 JPEG 和 TIFF 檔案時，存在多個記憶體損毀問題，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用這些弱點執行任意程式碼。(CVE-2017-2960、CVE-2017-2963、CVE-2017-2964、CVE-2017-2965) - 處理 XSLT lang() 函式時，存在一個類型混淆錯誤，會讓未經驗證的遠端攻擊者得以執行任意程式碼。(CVE-2017-2962) - 處理 TIFF 影像() 時，ImageConversion 元件中存在一個堆積緩衝區溢位情形，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可利用此弱點執行任意程式碼。(CVE-2017-2966) - JPEG2000 剖析器中存在一個緩衝區溢位情形，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可惡意利用此弱點來洩漏敏感資訊。(CVE-2017-3009) - 轉譯引擎中存在一個記憶體損毀問題，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可惡意利用此弱點，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2017-3010) 請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

远程 Windows 主机上安装的 Adobe Acrobat 版本低于 11.0.19、15.006.30279 或 15.023.20053。因而会受到多个漏洞的影响：- 由于未正确验证不明输入，存在多个内存损坏问题。未经身份验证的远程攻击者可利用这些问题执行任意代码。(CVE-2017-2939, CVE-2017-2940, CVE-2017-2941, CVE-2017-2943, CVE-2017-2944, CVE-2017-2953, CVE-2017-2954) - 由于未正确验证不明输入，存在多个堆缓冲区溢出情况。未经身份验证的远程攻击者可利用这些问题执行任意代码。(CVE-2017-2942, CVE-2017-2945, CVE-2017-2959) - 由于未正确验证不明输入，处理 JPEG2000 图像时存在堆缓冲区溢出情况。未经身份验证的远程攻击者可利用此问题执行任意代码。(CVE-2017-2946) - 存在不明安全绕过漏洞，允许未经身份验证的远程攻击者造成不明影响。(CVE-2017-2947) - 由于未正确验证不明输入，存在多个溢出情况。未经身份验证的远程攻击者可利用这些问题执行任意代码。(CVE-2017-2948, CVE-2017-2952) - 处理 XSLT element-available() 函数时，存在堆缓冲区溢出情况，允许未经身份验证的远程攻击者执行任意代码。(CVE-2017-2949) - 处理 XFA 子表单布局、断字对象、字段字体大小和模板对象时，存在多个释放后使用错误。未经身份验证的远程攻击者可利用这些问题执行任意代码。(CVE-2017-2950, CVE-2017-2951, CVE-2017-2961, CVE-2017-2967) - 存在多个释放后使用内存错误，允许未经身份验证的远程攻击者执行任意代码。(CVE-2017-2955, CVE-2017-2956, CVE-2017-2957, CVE-2017-2958) - 由于未正确验证不明输入，处理 JPEG 和 TIFF 文件时，存在多个内存损坏问题。未经身份验证的远程攻击者可利用这些问题执行任意代码。(CVE-2017-2960, CVE-2017-2963, CVE-2017-2964, CVE-2017-2965) - 处理 XSLT lang() 函数时，存在类型混淆错误，允许未经身份验证的远程攻击者执行任意代码。(CVE-2017-2962) - 由于未正确验证不明输入，处理 TIFF images() 时，ImageConversion 组件中存在堆缓冲区溢出情况。未经身份验证的远程攻击者可利用此问题执行任意代码。(CVE-2017-2966) - 由于未正确验证不明输入，JPEG2000 解析器中存在缓冲区溢出情况。未经身份验证的远程攻击者可利用此问题泄露敏感信息。(CVE-2017-3009) - 由于未正确验证不明输入，Rendering 引擎中存在内存损坏问题。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2017-3010) 请注意，Nessus 并未针对这些问题进行测试，而仅依赖应用程序自我报告的版本号。

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable type confusion vulnerability in the XSLT engine related to localization functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2962)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2950)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2951)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2955, CVE-2017-2958)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the     navigation pane. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2956)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to collaboration     functionality. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2957)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to validation functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2961)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2942)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2945)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing the segment for storing non-graphic information.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2946)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to     arbitrary code execution. (CVE-2017-2949)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color     profile metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2959)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed     TIFF segments. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2966)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2970)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2971)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2972)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2948)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing     tags in TIFF files. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2952)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing a malformed cross-reference table.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2939)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation     could lead to arbitrary code execution. (CVE-2017-2940)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2941)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2943)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2944)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF     image. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2953)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF     images. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2954)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF     metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2960)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the     color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution.
    (CVE-2017-2963)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of     JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2964)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file     parsing. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2965)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and     organization. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2967)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-3010)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     a security bypass vulnerability when manipulating Form Data Format (FDF). (CVE-2017-2947)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to     information disclosure. (CVE-2017-3009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable type confusion vulnerability in the XSLT engine related to localization functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2962)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2950)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2951)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2955, CVE-2017-2958)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the     navigation pane. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2956)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the JavaScript engine, related to collaboration     functionality. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2957)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable use after free vulnerability in the XFA engine, related to validation functionality.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2961)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2942)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2945)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability when parsing the segment for storing non-graphic information.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2946)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to     arbitrary code execution. (CVE-2017-2949)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color     profile metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2959)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed     TIFF segments. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2966)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2970)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-2971)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2972)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could     lead to arbitrary code execution. (CVE-2017-2948)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing     tags in TIFF files. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2952)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing a malformed cross-reference table.
    Successful exploitation could lead to arbitrary code execution. (CVE-2017-2939)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation     could lead to arbitrary code execution. (CVE-2017-2940)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2941)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2943)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful     exploitation could lead to arbitrary code execution. (CVE-2017-2944)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF     image. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2953)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF     images. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2954)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF     metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2960)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the     color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution.
    (CVE-2017-2963)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of     JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2964)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file     parsing. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2965)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and     organization. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2967)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead     to arbitrary code execution. (CVE-2017-3010)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     a security bypass vulnerability when manipulating Form Data Format (FDF). (CVE-2017-2947)

  - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have     an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to     information disclosure. (CVE-2017-3009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
96453	Adobe Reader < 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
209344	Adobe Reader < 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)	Nessus	MacOS X Local Security Checks	10/21/2024	10/22/2024	critical
96453	Adobe Reader < 15.006.30279 / 15.023.20053 の複数の脆弱性 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
96452	Adobe Acrobat < 11.0.19/ 15.006.30279/ 15.023.20053の複数の脆弱性 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
96453	Adobe Reader < 15.006.30279 / 15.023.20053 多个漏洞 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
96453	Adobe Reader < 15.006.30279 / 15.023.20053 多個弱點 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
96452	Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 多個弱點 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
96452	Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 多个漏洞 (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical
209343	Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)	Nessus	MacOS X Local Security Checks	10/21/2024	10/22/2024	critical
96452	Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)	Nessus	Windows	1/12/2017	10/21/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical