Summary
| Detail | |||
|---|---|---|---|
| Vendor | Adobe | First view | 2000-10-20 |
| Product | Acrobat | Last view | 2024-12-19 |
| Version | 9 | Type | |
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 5.5 | 2024-12-19 | CVE-2023-21586 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-19 | CVE-2022-44520 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-19 | CVE-2022-44519 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-19 | CVE-2022-44518 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-19 | CVE-2022-44517 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-19 | CVE-2022-44516 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-19 | CVE-2022-44515 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-19 | CVE-2022-44514 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-19 | CVE-2022-44513 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-19 | CVE-2022-44512 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 6.3 | 2024-12-10 | CVE-2024-49535 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity, potentially leading to unauthorized read access outside the Acrobat sandbox. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document. |
| 5.5 | 2024-12-10 | CVE-2024-49534 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-10 | CVE-2024-49533 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-10 | CVE-2024-49532 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-12-10 | CVE-2024-49531 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-12-10 | CVE-2024-49530 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-09-13 | CVE-2024-45112 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when a resource is accessed using a type that is not compatible with the actual object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-09-13 | CVE-2024-41869 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-09-05 | CVE-2024-45107 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-08-14 | CVE-2024-41835 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-08-14 | CVE-2024-41834 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-08-14 | CVE-2024-41833 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 5.5 | 2024-08-14 | CVE-2024-41832 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-08-14 | CVE-2024-41831 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 7.8 | 2024-08-14 | CVE-2024-41830 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 37% (438) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 17% (211) | CWE-416 | Use After Free |
| 14% (167) | CWE-125 | Out-of-bounds Read |
| 7% (91) | CWE-787 | Out-of-bounds Write |
| 3% (46) | CWE-20 | Improper Input Validation |
| 2% (32) | CWE-200 | Information Exposure |
| 2% (24) | CWE-284 | Access Control (Authorization) Issues |
| 1% (22) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
| 1% (20) | CWE-399 | Resource Management Errors |
| 1% (17) | CWE-189 | Numeric Errors |
| 1% (15) | CWE-476 | NULL Pointer Dereference |
| 0% (11) | CWE-264 | Permissions, Privileges, and Access Controls |
| 0% (11) | CWE-190 | Integer Overflow or Wraparound |
| 0% (8) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 0% (7) | CWE-772 | Missing Release of Resource after Effective Lifetime |
| 0% (5) | CWE-704 | Incorrect Type Conversion or Cast |
| 0% (5) | CWE-122 | Heap-based Buffer Overflow |
| 0% (4) | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflo... |
| 0% (3) | CWE-427 | Uncontrolled Search Path Element |
| 0% (3) | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition |
| 0% (3) | CWE-269 | Improper Privilege Management |
| 0% (3) | CWE-121 | Stack-based Buffer Overflow |
| 0% (3) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
| 0% (2) | CWE-611 | Information Leak Through XML External Entity File Disclosure |
| 0% (2) | CWE-379 | Creation of Temporary File in Directory with Incorrect Permissions |
Oval Markup Language : Definitions
| OvalID | Name |
|---|---|
| oval:org.mitre.oval:def:664 | Code Execution Vulnerability in XPDF PDF Viewer |
| oval:org.mitre.oval:def:29418 | Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through ... |
| oval:org.mitre.oval:def:11698 | Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attack... |
| oval:org.mitre.oval:def:29480 | Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attack... |
| oval:org.mitre.oval:def:6348 | Adobe Reader and Acrobat DoS via long sequence of # (hash) characters |
| oval:org.mitre.oval:def:9693 | Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader P... |
| oval:org.mitre.oval:def:6487 | Adobe Reader and Acrobat Multiple Vulnerabilities |
| oval:org.mitre.oval:def:10042 | Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, ... |
| oval:org.mitre.oval:def:10299 | Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2... |
| oval:org.mitre.oval:def:9813 | Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow... |
| oval:org.mitre.oval:def:9928 | Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute... |
| oval:org.mitre.oval:def:11161 | Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and ear... |
| oval:org.mitre.oval:def:10957 | Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote ... |
| oval:org.mitre.oval:def:22416 | ELSA-2008:0144: acroread security update (Critical) |
| oval:org.mitre.oval:def:5697 | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier ... |
| oval:org.mitre.oval:def:22770 | ELSA-2009:0376: acroread security update (Critical) |
| oval:org.mitre.oval:def:22229 | ELSA-2009:1109: acroread security update (Critical) |
| oval:org.mitre.oval:def:6532 | Adobe Reader and Acrobat denial of service (application crash) via a PDF |
| oval:org.mitre.oval:def:6534 | Adobe Reader and Acrobat allow to execute arbitrary code via a crafted PDF file |
| oval:org.mitre.oval:def:6280 | Adobe Reader and Acrobat denial of service via a crafted document |
| oval:org.mitre.oval:def:5964 | Adobe Reader and Acrobat DoS or possibly execute arbitrary code via unspecifi... |
| oval:org.mitre.oval:def:6284 | Adobe Reader and Acrobat bypass intended Trust Manager restrictions via unspe... |
| oval:org.mitre.oval:def:6365 | Adobe Reader and Acrobat social engineering attack via unknown vectors |
| oval:org.mitre.oval:def:5636 | Adobe Reader and Acrobat cause DoS (memory corruption) or execute arbitrary c... |
| oval:org.mitre.oval:def:5523 | Adobe Reader and Acrobat cause denial of service or possibly execute arbitrar... |
SAINT Exploits
| Description | Link |
|---|---|
| Adobe Acrobat util.printf JavaScript function buffer overflow | More info here |
| Adobe Acrobat and Reader JavaScript buffer overflow | More info here |
| Adobe Reader Flash AVM2 Memory Corruption | More info here |
| Adobe Reader JBIG2 image stream buffer overflow | More info here |
| Adobe Acrobat Reader U3D CLODMeshContinuation Code Execution | More info here |
| Adobe Reader CoolType.dll buffer overflow | More info here |
| Adobe Reader media.newPlayer Use-After-Free Code Execution | More info here |
| Adobe Reader Javascript API getAnnots method vulnerability | More info here |
| Adobe Flash Player callMethod Bytecode Memory Corruption | More info here |
| Adobe Reader FlateDecode filter TIFF Predictor integer overflow | More info here |
| Adobe Reader Libtiff TIFFFetchShortPair Stack Buffer Overflow | More info here |
| Adobe Reader U3D Heap Overflow | More info here |
| Adobe Flash Player authplay.dll vulnerability | More info here |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 78248 | Adobe Reader/Acrobat Unspecified Memory Corruption (2011-4373) |
| 78247 | Adobe Reader/Acrobat rt3d.dll PDF Embedded BMP Image Handling Overflow |
| 78246 | Adobe Reader/Acrobat Unspecified Heap Memory Corruption |
| 78245 | Adobe Reader/Acrobat Unspecified Memory Corruption (2011-4370) |
| 78026 | Adobe Reader / Acrobat PRC Component Remote Memory Corruption |
| 77529 | Adobe Reader / Acrobat U3D Data Handling Remote Memory Corruption |
| 75441 | Adobe Reader / Acrobat CoolType.dll Multiple Unspecified Overflows |
| 75440 | Adobe Reader / Acrobat Logic Error Unspecified Memory Corruption |
| 75439 | Adobe Reader / Acrobat Use-after-free PDF Embedded JPG File Handling Remote C... |
| 75438 | Adobe Reader / Acrobat Memory Leakage Condition Unspecified Remote Code Execu... |
| 75437 | Adobe Reader / Acrobat Image Parsing Library Multiple Unspecified Overflow |
| 75436 | Adobe Reader / Acrobat Unspecified Overflow (2011-2437) |
| 75435 | Adobe Reader / Acrobat Image Parsing Library Unspecified Overflow |
| 75434 | Adobe Reader / Acrobat Unspecified Overflow (2011-2435) |
| 75433 | Adobe Reader / Acrobat Unspecified Overflow (2011-2434) |
| 75432 | Adobe Reader / Acrobat Unspecified Overflow (2011-2433) |
| 75431 | Adobe Reader / Acrobat U3D TIFF Resource Handling Overflow |
| 75430 | Adobe Reader / Acrobat Unspecified Security Bypass Remote Code Execution |
| 73068 | Adobe Reader / Acrobat Unspecified Memory Corruption (2011-2106) |
| 73067 | Adobe Reader / Acrobat Font Handling Memory Corruption |
| 73066 | Adobe Reader / Acrobat Unspecified Memory Corruption DoS |
| 73065 | Adobe Reader / Acrobat Unspecified Memory Corruption (2011-2103) |
| 73064 | Adobe Reader / Acrobat Unspecified Security Bypass |
| 73063 | Adobe Reader / Acrobat Unspecified XSS |
| 73062 | Adobe Reader / Acrobat Unspecified Path Subversion Arbitrary DLL Injection Co... |
ExploitDB Exploits
| id | Description |
|---|---|
| 29881 | Adobe Acrobat Reader - ASLR/DEP Bypass Exploit with SANDBOX BYPASS |
| 18366 | Adobe Reader U3D Memory Corruption Vulnerability |
| 17473 | Adobe Reader X Atom Type Confusion Vulnerability Exploit |
| 17175 | Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability |
| 17027 | Adobe Flash Player AVM Bytecode Verification |
| 16619 | Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow |
| 16494 | Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow |
| 15212 | Adobe Acrobat and Reader Array Indexing Remote Code Execution Vulnerability |
| 15086 | MOAUB #23 - Adobe Acrobat Reader and Flash 'newfunction' Remote Code Executio... |
| 14982 | MOAUB #12 - Adobe Acrobat and Reader "pushstring" Memory Corruption |
| 14121 | Adobe Reader 9.3.2 (CoolType.dll) Remote Memory Corruption / DoS Vulnerability |
| 10618 | Adobe Reader and Acrobat (CVE-2009-4324) Exploit |
| 9865 | Adobe Acrobat Reader 7-9 U3D BoF |
| 7006 | Adobe Reader - util.printf() JavaScript Function Stack Overflow Exploit (2) |
OpenVAS Exploits
| id | Description |
|---|---|
| 2012-12-13 | Name : SuSE Update for update openSUSE-SU-2012:0512-1 (update) File : nvt/gb_suse_2012_0512_1.nasl |
| 2012-08-20 | Name : Adobe Acrobat Multiple Vulnerabilities - Mac OS X File : nvt/gb_adobe_acrobat_mult_vuln_aug12_macosx.nasl |
| 2012-08-20 | Name : Adobe Acrobat Multiple Vulnerabilities - Windows File : nvt/gb_adobe_acrobat_mult_vuln_aug12_win.nasl |
| 2012-08-20 | Name : Adobe Reader Multiple Vulnerabilities - Mac OS X File : nvt/gb_adobe_prdts_mult_vuln_aug12_macosx.nasl |
| 2012-08-20 | Name : Adobe Reader Multiple Vulnerabilities - Windows File : nvt/gb_adobe_prdts_mult_vuln_aug12_win.nasl |
| 2012-08-10 | Name : Gentoo Security Advisory GLSA 201206-14 (acroread) File : nvt/glsa_201206_14.nasl |
| 2012-08-02 | Name : SuSE Update for acroread openSUSE-SU-2012:0087-1 (acroread) File : nvt/gb_suse_2012_0087_1.nasl |
| 2012-04-17 | Name : Adobe Reader Multiple Vulnerabilities April-2012 (Mac OS X) File : nvt/gb_adobe_prdts_mult_vuln_apr12_macosx.nasl |
| 2012-04-16 | Name : Adobe Reader Multiple Vulnerabilities April-2012 (Windows) File : nvt/gb_adobe_prdts_mult_vuln_apr12_win.nasl |
| 2012-04-16 | Name : Adobe Reader Multiple Vulnerabilities April-2012 (Linux) File : nvt/gb_adobe_reader_mult_vuln_apr12_lin.nasl |
| 2012-02-12 | Name : FreeBSD Ports: acroread9 File : nvt/freebsd_acroread9.nasl |
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201110-11 (Adobe Flash Player) File : nvt/glsa_201110_11.nasl |
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201201-19 (acroread) File : nvt/glsa_201201_19.nasl |
| 2012-01-23 | Name : Adobe Reader Integer Overflow Vulnerability - Jan 12 (Linux) File : nvt/gb_adobe_reader_int_overflow_vuln_lin_jan12.nasl |
| 2012-01-16 | Name : Adobe Reader/Acrobat Multiple Memory Corruption Vulnerabilities - MAC OS X File : nvt/gb_adobe_prdts_mult_mem_crptn_vuln_macosx.nasl |
| 2012-01-16 | Name : Adobe Reader/Acrobat Multiple Memory Corruption Vulnerabilities - Windows File : nvt/gb_adobe_prdts_mult_mem_crptn_vuln_win.nasl |
| 2011-12-09 | Name : Adobe Reader/Acrobat 'U3D' Component Memory Corruption Vulnerability - Mac OS X File : nvt/gb_adobe_prdts_u3d_mem_crptn_vuln_macosx.nasl |
| 2011-12-09 | Name : Adobe Reader/Acrobat 'U3D' Component Memory Corruption Vulnerability - Windows File : nvt/gb_adobe_prdts_u3d_mem_crptn_vuln_win.nasl |
| 2011-12-09 | Name : Adobe Reader 'U3D' Component Memory Corruption Vulnerability - Linux File : nvt/gb_adobe_reader_u3d_mem_crptn_vuln_lin.nasl |
| 2011-12-05 | Name : SuSE Update for acroread SUSE-SA:2011:044 File : nvt/gb_suse_2011_044.nasl |
| 2011-10-28 | Name : Adobe Reader and Acrobat Multiple Vulnerabilities September-2011 (Mac OS X) File : nvt/gb_adobe_prdts_mult_vuln_sep11_macosx.nasl |
| 2011-10-28 | Name : Adobe Reader and Acrobat Multiple Vulnerabilities September-2011 (Windows) File : nvt/gb_adobe_prdts_mult_vuln_sep11_win.nasl |
| 2011-10-28 | Name : Adobe Reader Multiple Vulnerabilities September-2011 (Linux) File : nvt/gb_adobe_reader_mult_vuln_sep11_lin.nasl |
| 2011-08-03 | Name : FreeBSD Ports: linux-flashplugin File : nvt/freebsd_linux-flashplugin16.nasl |
| 2011-07-05 | Name : Adobe Reader/Acrobat Memory Corruption Vulnerability (Windows) File : nvt/secpod_adobe_prdts_mem_crptn_vuln_win_jun11.nasl |
Information Assurance Vulnerability Management (IAVM)
| id | Description |
|---|---|
| 2015-A-0151 | Multiple Vulnerabilities in Adobe Reader and Acrobat Severity: Category I - VMSKEY: V0061075 |
| 2014-A-0070 | Multiple Vulnerabilities in Adobe Reader and Acrobat Severity: Category I - VMSKEY: V0050439 |
| 2014-A-0002 | Multiple Vulnerabilities in Adobe Reader and Acrobat Severity: Category I - VMSKEY: V0043407 |
| 2013-A-0186 | Adobe Reader and Acrobat Javascript Security Control Vulnerability Severity: Category II - VMSKEY: V0040754 |
| 2013-A-0169 | Multiple Vulnerabilities in Adobe Reader and Acrobat Severity: Category I - VMSKEY: V0040296 |
| 2012-B-0048 | Multiple Vulnerabilities in HP Systems Insight Manager Severity: Category I - VMSKEY: V0032178 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Adobe Acrobat Plugin Universal cross-site scripting attempt RuleID : 9842 - Type : FILE-PDF - Revision : 11 |
| 2020-01-16 | Adobe Acrobat Reader and Acrobat TTF SING table parsing remote code execution... RuleID : 52484 - Type : FILE-PDF - Revision : 1 |
| 2020-01-16 | Adobe Acrobat Reader and Acrobat TTF SING table parsing remote code execution... RuleID : 52483 - Type : FILE-PDF - Revision : 1 |
| 2020-01-14 | Adobe Acrobat Reader embedded font type max subroutine buffer overflow attempt RuleID : 52466 - Type : FILE-PDF - Revision : 1 |
| 2020-01-14 | Adobe Acrobat Reader embedded font type max subroutine buffer overflow attempt RuleID : 52465 - Type : FILE-PDF - Revision : 1 |
| 2020-01-14 | Adobe Acrobat Reader embedded font type max subroutine buffer overflow attempt RuleID : 52464 - Type : FILE-PDF - Revision : 1 |
| 2020-01-14 | Adobe Acrobat Reader embedded font type max subroutine buffer overflow attempt RuleID : 52463 - Type : FILE-PDF - Revision : 1 |
| 2019-12-10 | Adobe Acrobat Reader and Acrobat TTF SING table parsing remote code execution... RuleID : 52125 - Type : FILE-PDF - Revision : 2 |
| 2019-12-10 | Adobe Acrobat Reader and Acrobat TTF SING table parsing remote code execution... RuleID : 52124 - Type : FILE-PDF - Revision : 2 |
| 2019-09-24 | Adobe Acrobat Reader RGB color table out of bounds read attempt RuleID : 51163 - Type : FILE-PDF - Revision : 1 |
| 2019-09-24 | Adobe Acrobat Reader RGB color table out of bounds read attempt RuleID : 51162 - Type : FILE-PDF - Revision : 1 |
| 2019-09-17 | Adobe Reader SFNT out of bounds memory read attempt RuleID : 51026 - Type : FILE-PDF - Revision : 1 |
| 2019-09-17 | Adobe Reader SFNT out of bounds memory read attempt RuleID : 51025 - Type : FILE-PDF - Revision : 1 |
| 2019-07-16 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 50444 - Type : FILE-IMAGE - Revision : 2 |
| 2019-07-16 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 50443 - Type : FILE-IMAGE - Revision : 2 |
| 2019-07-16 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 50442 - Type : FILE-IMAGE - Revision : 2 |
| 2019-07-16 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 50441 - Type : FILE-IMAGE - Revision : 2 |
| 2019-03-12 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 49125 - Type : FILE-IMAGE - Revision : 2 |
| 2019-03-12 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 49124 - Type : FILE-IMAGE - Revision : 2 |
| 2019-03-12 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 49123 - Type : FILE-IMAGE - Revision : 2 |
| 2019-03-12 | Adobe Acrobat TIFF heap buffer overflow attempt RuleID : 49122 - Type : FILE-IMAGE - Revision : 2 |
| 2018-05-01 | Adobe Acrobat Pro JPEG embedded XPS file heap overflow attempt RuleID : 46118 - Type : FILE-OTHER - Revision : 1 |
| 2018-05-01 | Adobe Acrobat Pro JPEG embedded XPS file heap overflow attempt RuleID : 46117 - Type : FILE-OTHER - Revision : 1 |
| 2018-04-27 | Adobe Acrobat EMF malformed Object record out-of-bounds access attempt RuleID : 46054 - Type : FILE-OTHER - Revision : 1 |
| 2018-04-27 | Adobe Acrobat EMF malformed Object record out-of-bounds access attempt RuleID : 46053 - Type : FILE-OTHER - Revision : 1 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2018-02-15 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb18-02.nasl - Type: ACT_GATHER_INFO |
| 2018-02-15 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb18-02.nasl - Type: ACT_GATHER_INFO |
| 2018-02-15 | Name: The version of Adobe Acrobat installed on the remote host is affected by mult... File: macosx_adobe_acrobat_apsb18-02.nasl - Type: ACT_GATHER_INFO |
| 2018-02-15 | Name: The version of Adobe Reader installed on the remote host is affected by multi... File: macosx_adobe_reader_apsb18-02.nasl - Type: ACT_GATHER_INFO |
| 2017-11-17 | Name: The version of Adobe Acrobat installed on the remote host is affected by mult... File: macosx_adobe_acrobat_apsb17-36.nasl - Type: ACT_GATHER_INFO |
| 2017-11-17 | Name: The version of Adobe Reader installed on the remote host is affected by multi... File: macosx_adobe_reader_apsb17-36.nasl - Type: ACT_GATHER_INFO |
| 2017-11-16 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb17-36.nasl - Type: ACT_GATHER_INFO |
| 2017-11-16 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb17-36.nasl - Type: ACT_GATHER_INFO |
| 2017-11-06 | Name: The remote Debian host is missing a security update. File: debian_DLA-1161.nasl - Type: ACT_GATHER_INFO |
| 2017-08-11 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb17-24.nasl - Type: ACT_GATHER_INFO |
| 2017-08-11 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb17-24.nasl - Type: ACT_GATHER_INFO |
| 2017-08-11 | Name: The version of Adobe Acrobat installed on the remote host is affected by mult... File: macosx_adobe_acrobat_apsb17-24.nasl - Type: ACT_GATHER_INFO |
| 2017-08-11 | Name: The version of Adobe Reader installed on the remote host is affected by multi... File: macosx_adobe_reader_apsb17-24.nasl - Type: ACT_GATHER_INFO |
| 2017-04-14 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb17-11.nasl - Type: ACT_GATHER_INFO |
| 2017-04-14 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb17-11.nasl - Type: ACT_GATHER_INFO |
| 2017-04-14 | Name: The version of Adobe Acrobat installed on the remote host is affected by mult... File: macosx_adobe_acrobat_apsb17-11.nasl - Type: ACT_GATHER_INFO |
| 2017-04-14 | Name: The version of Adobe Reader installed on the remote host is affected by multi... File: macosx_adobe_reader_apsb17-11.nasl - Type: ACT_GATHER_INFO |
| 2017-01-12 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb17-01.nasl - Type: ACT_GATHER_INFO |
| 2017-01-12 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb17-01.nasl - Type: ACT_GATHER_INFO |
| 2017-01-12 | Name: The version of Adobe Acrobat installed on the remote macOS or Mac OS X host i... File: macosx_adobe_acrobat_apsb17-01.nasl - Type: ACT_GATHER_INFO |
| 2017-01-12 | Name: The version of Adobe Reader installed on the remote macOS or Mac OS X host is... File: macosx_adobe_reader_apsb17-01.nasl - Type: ACT_GATHER_INFO |
| 2016-10-14 | Name: The version of Adobe Acrobat installed on the remote Windows host is affected... File: adobe_acrobat_apsb16-33.nasl - Type: ACT_GATHER_INFO |
| 2016-10-14 | Name: The version of Adobe Reader installed on the remote Windows host is affected ... File: adobe_reader_apsb16-33.nasl - Type: ACT_GATHER_INFO |
| 2016-10-14 | Name: The version of Adobe Acrobat installed on the remote macOS or Mac OS X host i... File: macosx_adobe_acrobat_apsb16-33.nasl - Type: ACT_GATHER_INFO |
| 2016-10-14 | Name: The version of Adobe Reader installed on the remote macOS or Mac OS X host is... File: macosx_adobe_reader_apsb16-33.nasl - Type: ACT_GATHER_INFO |
