Summary
This host is installed with Adobe Reader/Acrobat and is prone to multiple vulnerabilities.
Impact
Successful exploitation will let attackers to inject malicious scripting code, disclose sensitive information or execute arbitrary code by tricking a user into opening a specially crafted PDF document.
Impact Level: System/Application
Solution
Upgrade to Adobe Reader/Acrobat version 9.3.2 or 8.2.2 For updates refer to http://www.adobe.com
Insight
The flaws are due to buffer overflows, memory corruptions and input validation errors when processing malformed data within a PDF document.
Affected
Adobe Reader version 8.x before 8.2.2 and 9.x before 9.3.2, Adobe Acrobat version 8.x before 8.2.2 and 9.x before 9.3.2 on windows.
Detection
Get the installed version with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 May13 (Mac OS X)
- Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Windows
- Adobe AIR Code Execution and DoS Vulnerabilities Nov13 (Mac OS X)
- Adobe Acrobat Multiple Vulnerabilities - 01 Jan14 (Windows)
- Adobe AIR Multiple Vulnerabilities-01 Aug14 (Windows)