This host is installed with Adobe products and are prone to multiple memory corruption vulnerabilities.

Successful exploitation will allow attackers to execute arbitrary code in the context of the affected application or cause a denial of service. Impact Level: Application

Upgrade to Adobe Reader version 9.5 or 10.1.2 or later. Upgrade to Adobe Acrobat version 9.5 or 10.1.2 or later. For updates refer to http://www.adobe.com/

The flaws are due to - An unspecified error can be exploited to corrupt memory. - A signedness error in rt3d.dll when parsing certain BMP image content can be exploited to cause a heap-based buffer overflow via a specially crafted BMP image embedded in a PDF document.

Adobe Reader versions 9.x through 9.4.7 and 10.x through 10.1.1 on Windows. Adobe Acrobat versions 9.x through 9.4.7 and 10.x through 10.1.1 on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/show/osvdb/78245
• http://osvdb.org/show/osvdb/78246
• http://osvdb.org/show/osvdb/78247
• http://osvdb.org/show/osvdb/78248
• http://secunia.com/advisories/45852/
• http://securitytracker.com/id/1026496
• http://www.adobe.com/support/security/bulletins/apsb12-01.html

---

Updated on 2015-03-25