The host is installed with Adobe Acrobat and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to disclose potentially sensitive information, bypass certain security restrictions, execute arbitrary code and compromise a user's system. Impact Level: System/Application

Upgrade to Adobe Acrobat version 10.1.12 or 11.0.09 or later. For updates refer http://www.adobe.com/in/products/acrobat.html

Multiple Flaws are due to, - An use-after-free error can be exploited to execute arbitrary code. - An unspecified error can be exploited to conduct cross-site scripting attacks. - An error within the implementation of the 'replace()' JavaScript function can be exploited to cause a heap-based buffer overflow via specially crafted arguments. - An error within the 3DIF Plugin (3difr.x3d) can be exploited to cause a heap-based buffer overflow via a specially crafted PDF file. - Some unspecified errors can be exploited to cause a memory corruption. - An unspecified error can be exploited to bypass certain sandbox restrictions.

Adobe Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://helpx.adobe.com/security/products/reader/apsb14-20.html
• http://secunia.com/advisories/60901

---

Updated on 2015-03-25