The host is installed with Adobe Reader and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to disclose potentially sensitive information, bypass certain security restrictions, execute arbitrary code and compromise a user's system. Impact Level: System/Application

Upgrade to Adobe Reader version 10.1.12 or 11.0.09 or later. For updates refer http://get.adobe.com/reader

Multiple Flaws are due to, - An use-after-free error can be exploited to execute arbitrary code. - An error within the implementation of the 'replace()' JavaScript function can be exploited to cause a heap-based buffer overflow via specially crafted arguments. - An error within the 3DIF Plugin (3difr.x3d) can be exploited to cause a heap-based buffer overflow via a specially crafted PDF file. - Some unspecified errors can be exploited to cause a memory corruption. - An unspecified error can be exploited to bypass certain sandbox restrictions.

Adobe Reader 10.x before 10.1.12 and 11.x before 11.0.09 on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://helpx.adobe.com/security/products/reader/apsb14-20.html
• http://secunia.com/advisories/60901

---

Updated on 2015-03-25