The host is installed with Adobe Reader and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to disclose potentially sensitive information, bypass certain security restrictions, execute arbitrary code and compromise a user's system. Impact Level: System/Application

Upgrade to Adobe Reader version 10.1.13 or 11.0.10 or later. For updates refer, http://www.adobe.com/in/products/reader.html

Multiple Flaws are due to, - Multiple use-after-free errors can be exploited to execute arbitrary code. - Multiple unspecified errors can be exploited to cause a heap-based buffer overflow and subsequently execute arbitrary code. - A Race condition in the MoveFileEx call hook feature allows attackers to bypass a sandbox protection mechanism. - An error within the implementation of a Javascript API can be exploited to disclose certain information. - Multiple integer overflow errors can be exploited to execute arbitrary code.

Adobe Reader 10.x before 10.1.13 and Adobe Reader 11.x before 11.0.10 on on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://helpx.adobe.com/security/products/reader/apsb14-28.html
• http://secunia.com/advisories/61095/
• https://code.google.com/p/google-security-research/issues/detail?id=103

---

Updated on 2015-03-25