{"id": "CVE-2015-6690", "bulletinFamily": "NVD", "title": "CVE-2015-6690", "description": "Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.", "published": "2015-10-14T23:59:00", "modified": "2016-12-09T18:41:00", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6690", "reporter": "cve@mitre.org", "references": ["https://helpx.adobe.com/security/products/acrobat/apsb15-24.html", "http://www.securitytracker.com/id/1033796", "http://www.zerodayinitiative.com/advisories/ZDI-15-474"], "cvelist": ["CVE-2015-6690"], "type": "cve", "lastseen": "2019-05-29T18:14:43", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "5f0c36f474c868f70127cd2907daf5ea"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "b7838e3def0fdf1792424dea82a7b457"}, {"key": "cpe23", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvelist", "hash": "920b4655b6f2872db0ca44095edb7558"}, {"key": "cvss", "hash": "d726e774add6189e33cf2ea0c61a2ba5"}, {"key": "cvss2", "hash": "ce5208699795f3a205feddd180907041"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "6e8bd440f4fb55ae63bba09dfc27a808"}, {"key": "description", "hash": "2dae6966df8168be420885bf1a95652a"}, {"key": "href", "hash": "34d15f4bc905544c4bccf258bf86b6a0"}, {"key": "modified", "hash": "eef9d8de82b80240c3ee1348cacf1344"}, {"key": "published", "hash": "4a704a429acbfba75ac83bb17deb52a3"}, {"key": "references", "hash": "bedac7a67d0db945fdcd0f65174f536c"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "2ab15f6bebc1cf687773c4202da41f65"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "cc380f557caed5ded3fbbe712d98cd52e8296cd69a71a0a635f5f1e39758ef13", "viewCount": 0, "enchantments": {"score": {"value": 9.1, "vector": "NONE", "modified": "2019-05-29T18:14:43"}, "dependencies": {"references": [{"type": "zdi", "idList": ["ZDI-15-474"]}, {"type": "nessus", "idList": ["MACOSX_ADOBE_READER_APSB15-24.NASL", "ADOBE_READER_APSB15-24.NASL", "MACOSX_ADOBE_ACROBAT_APSB15-24.NASL", "ADOBE_ACROBAT_APSB15-24.NASL"]}, {"type": "kaspersky", "idList": ["KLA10682"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310806505", "OPENVAS:1361412562310806504", "OPENVAS:1361412562310806503", "OPENVAS:1361412562310806506"]}], "modified": "2019-05-29T18:14:43"}, "vulnersScore": 9.1}, "objectVersion": "1.3", "cpe": ["cpe:/a:adobe:acrobat_reader:10.1.11", "cpe:/a:adobe:acrobat_reader:10.1.12", "cpe:/a:adobe:acrobat:10.1.6", "cpe:/a:adobe:acrobat:11.0.5", "cpe:/a:adobe:acrobat:11.0.8", "cpe:/a:adobe:acrobat:11.0.0", "cpe:/a:adobe:acrobat:11.0.12", "cpe:/a:adobe:acrobat:10.1.7", "cpe:/a:adobe:acrobat_reader:10.1.5", "cpe:/a:adobe:acrobat_reader:10.1.8", "cpe:/a:adobe:acrobat_reader:11.0.8", "cpe:/a:adobe:acrobat_reader:10.1.7", "cpe:/a:adobe:acrobat_reader:10.1.6", "cpe:/a:adobe:acrobat_reader:11.0.12", "cpe:/a:adobe:acrobat:11.0.11", "cpe:/a:adobe:acrobat_reader:11.0.6", "cpe:/a:adobe:acrobat_reader:11.0.11", "cpe:/a:adobe:acrobat:11.0.4", "cpe:/a:adobe:acrobat_reader:10.1.13", "cpe:/a:adobe:acrobat:10.1.5", "cpe:/a:adobe:acrobat_reader:10.1.3", "cpe:/a:adobe:acrobat:11.0.9", "cpe:/a:adobe:acrobat_reader:11.0.9", "cpe:/a:adobe:acrobat_reader:10.1.4", "cpe:/a:adobe:acrobat_reader:11.0.7", "cpe:/a:adobe:acrobat:10.1.9", "cpe:/a:adobe:acrobat_reader:10.1.9", "cpe:/a:adobe:acrobat_reader:10.1.10", "cpe:/a:adobe:acrobat:10.1.1", "cpe:/a:adobe:acrobat:11.0.7", "cpe:/a:adobe:acrobat:10.1.14", "cpe:/a:adobe:acrobat_reader:11.0.0", "cpe:/a:adobe:acrobat:11.0.1", "cpe:/a:adobe:acrobat_reader:11.0.10", "cpe:/a:adobe:acrobat:11.0.2", "cpe:/a:adobe:acrobat_reader:10.1.1", "cpe:/a:adobe:acrobat_reader:11.0.3", "cpe:/a:adobe:acrobat_reader:10.1.0", "cpe:/a:adobe:acrobat:10.1.12", "cpe:/a:adobe:acrobat:11.0.10", "cpe:/a:adobe:acrobat_reader:11.0.2", "cpe:/a:adobe:acrobat_reader:11.0.1", "cpe:/a:adobe:acrobat:10.1.0", "cpe:/a:adobe:acrobat:10.1.2", "cpe:/a:adobe:acrobat:10.1.13", "cpe:/a:adobe:acrobat:10.1.4", "cpe:/a:adobe:acrobat_reader:11.0.5", "cpe:/a:adobe:acrobat_reader:10.1.14", "cpe:/a:adobe:acrobat:10.1.11", "cpe:/a:adobe:acrobat:11.0.3", "cpe:/a:adobe:acrobat_reader:10.1.2", "cpe:/a:adobe:acrobat_reader:11.0.4", "cpe:/a:adobe:acrobat:10.1.3", "cpe:/a:adobe:acrobat:10.1.8", "cpe:/a:adobe:acrobat:10.1.10", "cpe:/a:adobe:acrobat:11.0.6"], "affectedSoftware": [{"name": "adobe acrobat", "operator": "eq", "version": "10.1.5"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.7"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.9"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.0"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.8"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.11"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.1"}, {"name": "adobe acrobat_dc", "operator": "le", "version": "2015.008.20082"}, {"name": "adobe acrobat_reader_dc", "operator": "le", "version": "2015.008.20082"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.12"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.5"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.12"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.9"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.6"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.7"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.6"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.2"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.10"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.4"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.6"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.11"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.1"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.4"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.0"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.3"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.9"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.4"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.1"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.2"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.9"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.3"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.7"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.14"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.11"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.5"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.1"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.2"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.12"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.10"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.8"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.4"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.8"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.2"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.3"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.13"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.5"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.0"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.7"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.8"}, {"name": "adobe acrobat_dc", "operator": "le", "version": "2015.006.30060"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.11"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.10"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.10"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.3"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.13"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "10.1.6"}, {"name": "adobe acrobat_reader_dc", "operator": "le", "version": "2015.006.30060"}, {"name": "adobe acrobat", "operator": "eq", "version": "10.1.14"}, {"name": "adobe acrobat", "operator": "eq", "version": "11.0.0"}, {"name": "adobe acrobat_reader", "operator": "eq", "version": "11.0.12"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": true}, "cvss3": {}, "cpe23": [], "cwe": ["CWE-416"]}

{"zdi": [{"lastseen": "2016-11-09T00:18:05", "bulletinFamily": "info", "description": "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the popUpMenuEx method. Specially crafted arguments passed to popUpMenuEx can force a dangling pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process.", "modified": "2015-11-09T00:00:00", "published": "2015-10-13T00:00:00", "href": "http://www.zerodayinitiative.com/advisories/ZDI-15-474", "id": "ZDI-15-474", "title": "Adobe Reader popUpMenuEx Use-After-Free Remote Code Execution Vulnerability", "type": "zdi", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2019-11-22T02:12:39", "bulletinFamily": "scanner", "description": "The version of Adobe Reader installed on the remote Windows host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application", "modified": "2019-11-02T00:00:00", "id": "ADOBE_READER_APSB15-24.NASL", "href": "https://www.tenable.com/plugins/nessus/86403", "published": "2015-10-15T00:00:00", "title": "Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86403);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/20\");\n\n script_cve_id(\n \"CVE-2015-5583\",\n \"CVE-2015-5586\",\n \"CVE-2015-6683\",\n \"CVE-2015-6684\",\n \"CVE-2015-6685\",\n \"CVE-2015-6686\",\n \"CVE-2015-6687\",\n \"CVE-2015-6688\",\n \"CVE-2015-6689\",\n \"CVE-2015-6690\",\n \"CVE-2015-6691\",\n \"CVE-2015-6692\",\n \"CVE-2015-6693\",\n \"CVE-2015-6694\",\n \"CVE-2015-6695\",\n \"CVE-2015-6696\",\n \"CVE-2015-6697\",\n \"CVE-2015-6698\",\n \"CVE-2015-6699\",\n \"CVE-2015-6700\",\n \"CVE-2015-6701\",\n \"CVE-2015-6702\",\n \"CVE-2015-6703\",\n \"CVE-2015-6704\",\n \"CVE-2015-6705\",\n \"CVE-2015-6706\",\n \"CVE-2015-6707\",\n \"CVE-2015-6708\",\n \"CVE-2015-6709\",\n \"CVE-2015-6710\",\n \"CVE-2015-6711\",\n \"CVE-2015-6712\",\n \"CVE-2015-6713\",\n \"CVE-2015-6714\",\n \"CVE-2015-6715\",\n \"CVE-2015-6716\",\n \"CVE-2015-6717\",\n \"CVE-2015-6718\",\n \"CVE-2015-6719\",\n \"CVE-2015-6720\",\n \"CVE-2015-6721\",\n \"CVE-2015-6722\",\n \"CVE-2015-6723\",\n \"CVE-2015-6724\",\n \"CVE-2015-6725\",\n \"CVE-2015-7614\",\n \"CVE-2015-7615\",\n \"CVE-2015-7616\",\n \"CVE-2015-7617\",\n \"CVE-2015-7618\",\n \"CVE-2015-7619\",\n \"CVE-2015-7620\",\n \"CVE-2015-7621\",\n \"CVE-2015-7622\",\n \"CVE-2015-7623\",\n \"CVE-2015-7624\",\n \"CVE-2015-7650\",\n \"CVE-2015-8458\"\n );\n script_bugtraq_id(\n 77064,\n 77066,\n 77067,\n 77068,\n 77069,\n 77070,\n 77074,\n 79208\n );\n\n script_name(english:\"Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader 10.1.16 / 11.0.13 / 2015.006.30094 / \n2015.009.20069 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-7622\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/10/15\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_reader_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\nverui = install['display_version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 10.x <= 10.1.15\n# 11.x <= 11.0.12\n# DC Classic <= 2015.006.30060\n# DC Continuous <= 2015.008.20082\nif (\n (ver[0] == 10 && ver[1] < 1) ||\n (ver[0] == 10 && ver[1] == 1 && ver[2] <= 15) ||\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 12) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30060) ||\n (ver[0] == 15 && ver[1] == 7 ) ||\n (ver[0] == 15 && ver[1] == 8 && ver[2] <= 20082)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n report = '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-11-22T02:50:31", "bulletinFamily": "scanner", "description": "The version of Adobe Reader installed on the remote Mac OS X host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application", "modified": "2019-11-02T00:00:00", "id": "MACOSX_ADOBE_READER_APSB15-24.NASL", "href": "https://www.tenable.com/plugins/nessus/86405", "published": "2015-10-15T00:00:00", "title": "Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86405);\n script_version(\"1.9\");\n script_cvs_date(\"Date: 2019/11/20\");\n\n script_cve_id(\n \"CVE-2015-5583\",\n \"CVE-2015-5586\",\n \"CVE-2015-6683\",\n \"CVE-2015-6684\",\n \"CVE-2015-6685\",\n \"CVE-2015-6686\",\n \"CVE-2015-6687\",\n \"CVE-2015-6688\",\n \"CVE-2015-6689\",\n \"CVE-2015-6690\",\n \"CVE-2015-6691\",\n \"CVE-2015-6692\",\n \"CVE-2015-6693\",\n \"CVE-2015-6694\",\n \"CVE-2015-6695\",\n \"CVE-2015-6696\",\n \"CVE-2015-6697\",\n \"CVE-2015-6698\",\n \"CVE-2015-6699\",\n \"CVE-2015-6700\",\n \"CVE-2015-6701\",\n \"CVE-2015-6702\",\n \"CVE-2015-6703\",\n \"CVE-2015-6704\",\n \"CVE-2015-6705\",\n \"CVE-2015-6706\",\n \"CVE-2015-6707\",\n \"CVE-2015-6708\",\n \"CVE-2015-6709\",\n \"CVE-2015-6710\",\n \"CVE-2015-6711\",\n \"CVE-2015-6712\",\n \"CVE-2015-6713\",\n \"CVE-2015-6714\",\n \"CVE-2015-6715\",\n \"CVE-2015-6716\",\n \"CVE-2015-6717\",\n \"CVE-2015-6718\",\n \"CVE-2015-6719\",\n \"CVE-2015-6720\",\n \"CVE-2015-6721\",\n \"CVE-2015-6722\",\n \"CVE-2015-6723\",\n \"CVE-2015-6724\",\n \"CVE-2015-6725\",\n \"CVE-2015-7614\",\n \"CVE-2015-7615\",\n \"CVE-2015-7616\",\n \"CVE-2015-7617\",\n \"CVE-2015-7618\",\n \"CVE-2015-7619\",\n \"CVE-2015-7620\",\n \"CVE-2015-7621\",\n \"CVE-2015-7622\",\n \"CVE-2015-7623\",\n \"CVE-2015-7624\",\n \"CVE-2015-7650\",\n \"CVE-2015-8458\"\n );\n script_bugtraq_id(\n 77064,\n 77066,\n 77067,\n 77068,\n 77069,\n 77070,\n 77074,\n 79208\n );\n\n script_name(english:\"Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader 10.1.16 / 11.0.13 / 2015.006.30094 / \n2015.009.20069 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-7622\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/10/15\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_reader_installed.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 10.x <= 10.1.15\n# 11.x <= 11.0.12\n# DC Classic <= 2015.006.30060\n# DC Continuous <= 2015.008.20082\nif (\n (ver[0] == 10 && ver[1] < 1) ||\n (ver[0] == 10 && ver[1] == 1 && ver[2] <= 15) ||\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 12) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30060) ||\n (ver[0] == 15 && ver[1] == 7 ) ||\n (ver[0] == 15 && ver[1] == 8 && ver[2] <= 20082)\n)\n{\n if (report_verbosity > 0)\n {\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069' +\n '\\n';\n security_hole(port:0, extra:report);\n }\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-11-22T02:50:15", "bulletinFamily": "scanner", "description": "The version of Adobe Acrobat installed on the remote Mac OS X host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application", "modified": "2019-11-02T00:00:00", "id": "MACOSX_ADOBE_ACROBAT_APSB15-24.NASL", "href": "https://www.tenable.com/plugins/nessus/86404", "published": "2015-10-15T00:00:00", "title": "Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86404);\n script_version(\"1.9\");\n script_cvs_date(\"Date: 2019/11/20\");\n\n script_cve_id(\n \"CVE-2015-5583\",\n \"CVE-2015-5586\",\n \"CVE-2015-6683\",\n \"CVE-2015-6684\",\n \"CVE-2015-6685\",\n \"CVE-2015-6686\",\n \"CVE-2015-6687\",\n \"CVE-2015-6688\",\n \"CVE-2015-6689\",\n \"CVE-2015-6690\",\n \"CVE-2015-6691\",\n \"CVE-2015-6692\",\n \"CVE-2015-6693\",\n \"CVE-2015-6694\",\n \"CVE-2015-6695\",\n \"CVE-2015-6696\",\n \"CVE-2015-6697\",\n \"CVE-2015-6698\",\n \"CVE-2015-6699\",\n \"CVE-2015-6700\",\n \"CVE-2015-6701\",\n \"CVE-2015-6702\",\n \"CVE-2015-6703\",\n \"CVE-2015-6704\",\n \"CVE-2015-6705\",\n \"CVE-2015-6706\",\n \"CVE-2015-6707\",\n \"CVE-2015-6708\",\n \"CVE-2015-6709\",\n \"CVE-2015-6710\",\n \"CVE-2015-6711\",\n \"CVE-2015-6712\",\n \"CVE-2015-6713\",\n \"CVE-2015-6714\",\n \"CVE-2015-6715\",\n \"CVE-2015-6716\",\n \"CVE-2015-6717\",\n \"CVE-2015-6718\",\n \"CVE-2015-6719\",\n \"CVE-2015-6720\",\n \"CVE-2015-6721\",\n \"CVE-2015-6722\",\n \"CVE-2015-6723\",\n \"CVE-2015-6724\",\n \"CVE-2015-6725\",\n \"CVE-2015-7614\",\n \"CVE-2015-7615\",\n \"CVE-2015-7616\",\n \"CVE-2015-7617\",\n \"CVE-2015-7618\",\n \"CVE-2015-7619\",\n \"CVE-2015-7620\",\n \"CVE-2015-7621\",\n \"CVE-2015-7622\",\n \"CVE-2015-7623\",\n \"CVE-2015-7624\",\n \"CVE-2015-7650\",\n \"CVE-2015-8458\"\n );\n script_bugtraq_id(\n 77064,\n 77066,\n 77067,\n 77068,\n 77069,\n 77070,\n 77074,\n 79208\n );\n\n script_name(english:\"Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat 10.1.16 / 11.0.13 / 2015.006.30094 / \n2015.009.20069 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-7622\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/10/15\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_acrobat_installed.nbin\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 10.x <= 10.1.15\n# 11.x <= 11.0.12\n# DC Classic <= 2015.006.30060\n# DC Continuous <= 2015.008.20082\nif (\n (ver[0] == 10 && ver[1] < 1) ||\n (ver[0] == 10 && ver[1] == 1 && ver[2] <= 15) ||\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 12) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30060) ||\n (ver[0] == 15 && ver[1] == 7 ) ||\n (ver[0] == 15 && ver[1] == 8 && ver[2] <= 20082)\n)\n{\n if (report_verbosity > 0)\n {\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069' +\n '\\n';\n security_hole(port:0, extra:report);\n }\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-11-22T02:12:19", "bulletinFamily": "scanner", "description": "The version of Adobe Acrobat installed on the remote Windows host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application", "modified": "2019-11-02T00:00:00", "id": "ADOBE_ACROBAT_APSB15-24.NASL", "href": "https://www.tenable.com/plugins/nessus/86402", "published": "2015-10-15T00:00:00", "title": "Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(86402);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/20\");\n\n script_cve_id(\n \"CVE-2015-5583\",\n \"CVE-2015-5586\",\n \"CVE-2015-6683\",\n \"CVE-2015-6684\",\n \"CVE-2015-6685\",\n \"CVE-2015-6686\",\n \"CVE-2015-6687\",\n \"CVE-2015-6688\",\n \"CVE-2015-6689\",\n \"CVE-2015-6690\",\n \"CVE-2015-6691\",\n \"CVE-2015-6692\",\n \"CVE-2015-6693\",\n \"CVE-2015-6694\",\n \"CVE-2015-6695\",\n \"CVE-2015-6696\",\n \"CVE-2015-6697\",\n \"CVE-2015-6698\",\n \"CVE-2015-6699\",\n \"CVE-2015-6700\",\n \"CVE-2015-6701\",\n \"CVE-2015-6702\",\n \"CVE-2015-6703\",\n \"CVE-2015-6704\",\n \"CVE-2015-6705\",\n \"CVE-2015-6706\",\n \"CVE-2015-6707\",\n \"CVE-2015-6708\",\n \"CVE-2015-6709\",\n \"CVE-2015-6710\",\n \"CVE-2015-6711\",\n \"CVE-2015-6712\",\n \"CVE-2015-6713\",\n \"CVE-2015-6714\",\n \"CVE-2015-6715\",\n \"CVE-2015-6716\",\n \"CVE-2015-6717\",\n \"CVE-2015-6718\",\n \"CVE-2015-6719\",\n \"CVE-2015-6720\",\n \"CVE-2015-6721\",\n \"CVE-2015-6722\",\n \"CVE-2015-6723\",\n \"CVE-2015-6724\",\n \"CVE-2015-6725\",\n \"CVE-2015-7614\",\n \"CVE-2015-7615\",\n \"CVE-2015-7616\",\n \"CVE-2015-7617\",\n \"CVE-2015-7618\",\n \"CVE-2015-7619\",\n \"CVE-2015-7620\",\n \"CVE-2015-7621\",\n \"CVE-2015-7622\",\n \"CVE-2015-7623\",\n \"CVE-2015-7624\",\n \"CVE-2015-7650\",\n \"CVE-2015-8458\"\n );\n script_bugtraq_id(\n 77064,\n 77066,\n 77067,\n 77068,\n 77069,\n 77070,\n 77074,\n 79208\n );\n\n script_name(english:\"Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\nversion 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 or\nearlier. It is, therefore, affected by multiple vulnerabilities :\n\n - A buffer overflow condition exists that allows an\n attacker to disclose information. (CVE-2015-6692)\n\n - Multiple use-after-free errors exist that allow an\n attacker to execute arbitrary code. (CVE-2015-6689,\n CVE-2015-6688, CVE-2015-6690, CVE-2015-7615,\n CVE-2015-7617, CVE-2015-6687, CVE-2015-6684,\n CVE-2015-6691, CVE-2015-7621, CVE-2015-5586,\n CVE-2015-6683)\n\n - Multiple heap buffer overflow conditions exist that\n allow an attacker to execute arbitrary code.\n (CVE-2015-6696, CVE-2015-6698, CVE-2015-8458)\n\n - Multiple memory corruption issues exist that allow a\n remote attacker to execute arbitrary code.\n (CVE-2015-6685, CVE-2015-6693, CVE-2015-6694,\n CVE-2015-6695, CVE-2015-6686, CVE-2015-7622,\n CVE-2015-7650)\n\n - Multiple unspecified memory leak vulnerabilities exist.\n (CVE-2015-6699, CVE-2015-6700, CVE-2015-6701,\n CVE-2015-6702, CVE-2015-6703, CVE-2015-6704,\n CVE-2015-6697)\n\n - Multiple security bypass vulnerabilities exist that\n allow a remote attacker to disclose information.\n (CVE-2015-5583, CVE-2015-6705, CVE-2015-6706,\n CVE-2015-7624)\n\n - Multiple security bypass vulnerabilities exists that\n allow an attacker to bypass JavaScript API execution.\n (CVE-2015-6707, CVE-2015-6708, CVE-2015-6709,\n CVE-2015-6710, CVE-2015-6711, CVE-2015-6712,\n CVE-2015-7614, CVE-2015-7616, CVE-2015-6716,\n CVE-2015-6717, CVE-2015-6718, CVE-2015-6719,\n CVE-2015-6720, CVE-2015-6721, CVE-2015-6722,\n CVE-2015-6723, CVE-2015-6724, CVE-2015-6725,\n CVE-2015-7618, CVE-2015-7619, CVE-2015-7620,\n CVE-2015-7623, CVE-2015-6713, CVE-2015-6714,\n CVE-2015-6715)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat 10.1.16 / 11.0.13 / 2015.006.30094 / \n2015.009.20069 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-7622\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/10/15\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_acrobat_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\nverui = install['display_version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 10.x <= 10.1.15\n# 11.x <= 11.0.12\n# DC Classic <= 2015.006.30060\n# DC Continuous <= 2015.008.20082\nif (\n (ver[0] == 10 && ver[1] < 1) ||\n (ver[0] == 10 && ver[1] == 1 && ver[2] <= 15) ||\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 12) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30060) ||\n (ver[0] == 15 && ver[1] == 7 ) ||\n (ver[0] == 15 && ver[1] == 8 && ver[2] <= 20082)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n\n report = '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2019-07-17T14:27:38", "bulletinFamily": "scanner", "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2015-10-20T00:00:00", "id": "OPENVAS:1361412562310806506", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806506", "title": "Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Mac OS X)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Mac OS X)\n#\n# Authors:\n# Rinu Kuriakose <krinu@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806506\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2015-5583\", \"CVE-2015-5586\", \"CVE-2015-6683\", \"CVE-2015-6684\",\n \"CVE-2015-6685\", \"CVE-2015-6686\", \"CVE-2015-6687\", \"CVE-2015-6688\",\n \"CVE-2015-6689\", \"CVE-2015-6690\", \"CVE-2015-6691\", \"CVE-2015-6692\",\n \"CVE-2015-6693\", \"CVE-2015-6694\", \"CVE-2015-6695\", \"CVE-2015-6696\",\n \"CVE-2015-6697\", \"CVE-2015-6698\", \"CVE-2015-6699\", \"CVE-2015-6700\",\n \"CVE-2015-6701\", \"CVE-2015-6702\", \"CVE-2015-6703\", \"CVE-2015-6704\",\n \"CVE-2015-6705\", \"CVE-2015-6706\", \"CVE-2015-6707\", \"CVE-2015-6708\",\n \"CVE-2015-6709\", \"CVE-2015-6710\", \"CVE-2015-6711\", \"CVE-2015-6712\",\n \"CVE-2015-6713\", \"CVE-2015-6714\", \"CVE-2015-6715\", \"CVE-2015-6716\",\n \"CVE-2015-6717\", \"CVE-2015-6718\", \"CVE-2015-6719\", \"CVE-2015-6720\",\n \"CVE-2015-6721\", \"CVE-2015-6722\", \"CVE-2015-6723\", \"CVE-2015-6724\",\n \"CVE-2015-6725\", \"CVE-2015-7614\", \"CVE-2015-7615\", \"CVE-2015-7616\",\n \"CVE-2015-7617\", \"CVE-2015-7618\", \"CVE-2015-7619\", \"CVE-2015-7620\",\n \"CVE-2015-7621\", \"CVE-2015-7622\", \"CVE-2015-7623\", \"CVE-2015-7624\",\n \"CVE-2015-7829\", \"CVE-2015-7650\", \"CVE-2015-8458\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2015-10-20 11:06:46 +0530 (Tue, 20 Oct 2015)\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_name(\"Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws are due to:\n\n - Improper EScript exception handling.\n\n - Some use-after-free vulnerabilities.\n\n - Some buffer overflow vulnerabilities.\n\n - Some memory leak vulnerabilities.\n\n - Some security bypass vulnerabilities.\n\n - Multiple memory corruption vulnerabilities.\n\n - Some Javascript API execution restriction bypass vulnerabilities.\n\n - Mishandling of junctions in the Synchronizer directory.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow\n attackers to conduct a denial of service, unauthorized disclosure of information,\n unauthorized modification, disruption of service, bypass certain access restrictions\n and execution restrictions, to delete arbitrary files, to obtain sensitive\n information, execute arbitrary code and compromise a user's system.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat 10.1.x before 10.1.16\n and 11.x before 11.0.13 on Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version 10.1.16 or\n 11.0.13 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"10.1\", test_version2:\"10.1.15\"))\n{\n fix = \"10.1.16\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.12\"))\n{\n fix = \"11.0.13\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + readerVer + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:27:09", "bulletinFamily": "scanner", "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2015-10-20T00:00:00", "id": "OPENVAS:1361412562310806505", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806505", "title": "Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Windows)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Windows)\n#\n# Authors:\n# Rinu Kuriakose <krinu@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806505\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2015-5583\", \"CVE-2015-5586\", \"CVE-2015-6683\", \"CVE-2015-6684\",\n \"CVE-2015-6685\", \"CVE-2015-6686\", \"CVE-2015-6687\", \"CVE-2015-6688\",\n \"CVE-2015-6689\", \"CVE-2015-6690\", \"CVE-2015-6691\", \"CVE-2015-6692\",\n \"CVE-2015-6693\", \"CVE-2015-6694\", \"CVE-2015-6695\", \"CVE-2015-6696\",\n \"CVE-2015-6697\", \"CVE-2015-6698\", \"CVE-2015-6699\", \"CVE-2015-6700\",\n \"CVE-2015-6701\", \"CVE-2015-6702\", \"CVE-2015-6703\", \"CVE-2015-6704\",\n \"CVE-2015-6705\", \"CVE-2015-6706\", \"CVE-2015-6707\", \"CVE-2015-6708\",\n \"CVE-2015-6709\", \"CVE-2015-6710\", \"CVE-2015-6711\", \"CVE-2015-6712\",\n \"CVE-2015-6713\", \"CVE-2015-6714\", \"CVE-2015-6715\", \"CVE-2015-6716\",\n \"CVE-2015-6717\", \"CVE-2015-6718\", \"CVE-2015-6719\", \"CVE-2015-6720\",\n \"CVE-2015-6721\", \"CVE-2015-6722\", \"CVE-2015-6723\", \"CVE-2015-6724\",\n \"CVE-2015-6725\", \"CVE-2015-7614\", \"CVE-2015-7615\", \"CVE-2015-7616\",\n \"CVE-2015-7617\", \"CVE-2015-7618\", \"CVE-2015-7619\", \"CVE-2015-7620\",\n \"CVE-2015-7621\", \"CVE-2015-7622\", \"CVE-2015-7623\", \"CVE-2015-7624\",\n \"CVE-2015-7829\", \"CVE-2015-7650\", \"CVE-2015-8458\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2015-10-20 10:15:23 +0530 (Tue, 20 Oct 2015)\");\n script_tag(name:\"qod_type\", value:\"registry\");\n script_name(\"Adobe Acrobat Multiple Vulnerabilities - 01 October15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws are due to:\n\n - Improper EScript exception handling.\n\n - Some use-after-free vulnerabilities.\n\n - Some buffer overflow vulnerabilities.\n\n - Some memory leak vulnerabilities.\n\n - Some security bypass vulnerabilities.\n\n - Multiple memory corruption vulnerabilities.\n\n - Some Javascript API execution restriction bypass vulnerabilities.\n\n - Mishandling of junctions in the Synchronizer directory.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow\n attackers to conduct a denial of service, unauthorized disclosure of information,\n unauthorized modification, disruption of service, bypass certain access restrictions\n and execution restrictions, to delete arbitrary files, to obtain sensitive\n information, execute arbitrary code and compromise a user's system.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat 10.1.x before 10.1.16\n and 11.x before 11.0.13 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version 10.1.16 or\n 11.0.13 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"10.1\", test_version2:\"10.1.15\"))\n{\n fix = \"10.1.16\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.12\"))\n{\n fix = \"11.0.13\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + readerVer + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:36:38", "bulletinFamily": "scanner", "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "modified": "2018-10-19T00:00:00", "published": "2015-10-20T00:00:00", "id": "OPENVAS:1361412562310806504", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806504", "title": "Adobe Reader Multiple Vulnerabilities - 01 October15 (Mac OS X)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_reader_mult_vuln01_oct15_macosx.nasl 11975 2018-10-19 06:54:12Z cfischer $\n#\n# Adobe Reader Multiple Vulnerabilities - 01 October15 (Mac OS X)\n#\n# Authors:\n# Rinu Kuriakose <krinu@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806504\");\n script_version(\"$Revision: 11975 $\");\n script_cve_id(\"CVE-2015-5583\", \"CVE-2015-5586\", \"CVE-2015-6683\", \"CVE-2015-6684\",\n \"CVE-2015-6685\", \"CVE-2015-6686\", \"CVE-2015-6687\", \"CVE-2015-6688\",\n \"CVE-2015-6689\", \"CVE-2015-6690\", \"CVE-2015-6691\", \"CVE-2015-6692\",\n \"CVE-2015-6693\", \"CVE-2015-6694\", \"CVE-2015-6695\", \"CVE-2015-6696\",\n \"CVE-2015-6697\", \"CVE-2015-6698\", \"CVE-2015-6699\", \"CVE-2015-6700\",\n \"CVE-2015-6701\", \"CVE-2015-6702\", \"CVE-2015-6703\", \"CVE-2015-6704\",\n \"CVE-2015-6705\", \"CVE-2015-6706\", \"CVE-2015-6707\", \"CVE-2015-6708\",\n \"CVE-2015-6709\", \"CVE-2015-6710\", \"CVE-2015-6711\", \"CVE-2015-6712\",\n \"CVE-2015-6713\", \"CVE-2015-6714\", \"CVE-2015-6715\", \"CVE-2015-6716\",\n \"CVE-2015-6717\", \"CVE-2015-6718\", \"CVE-2015-6719\", \"CVE-2015-6720\",\n \"CVE-2015-6721\", \"CVE-2015-6722\", \"CVE-2015-6723\", \"CVE-2015-6724\",\n \"CVE-2015-6725\", \"CVE-2015-7614\", \"CVE-2015-7615\", \"CVE-2015-7616\",\n \"CVE-2015-7617\", \"CVE-2015-7618\", \"CVE-2015-7619\", \"CVE-2015-7620\",\n \"CVE-2015-7621\", \"CVE-2015-7622\", \"CVE-2015-7623\", \"CVE-2015-7624\",\n \"CVE-2015-7829\", \"CVE-2015-8458\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-19 08:54:12 +0200 (Fri, 19 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-10-20 10:50:57 +0530 (Tue, 20 Oct 2015)\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_name(\"Adobe Reader Multiple Vulnerabilities - 01 October15 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws are due to:\n\n - Improper EScript exception handling.\n\n - Some use-after-free vulnerabilities.\n\n - Some buffer overflow vulnerabilities.\n\n - Some memory leak vulnerabilities.\n\n - Some security bypass vulnerabilities.\n\n - Multiple memory corruption vulnerabilities.\n\n - Some Javascript API execution restriction bypass vulnerabilities.\n\n - Mishandling of junctions in the Synchronizer directory.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow\n attackers to conduct a denial of service, unauthorized disclosure of information,\n unauthorized modification, disruption of service, bypass certain access restrictions\n and execution restrictions, to delete arbitrary files, to obtain sensitive\n information, execute arbitrary code and compromise a user's system.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader 10.1.x before 10.1.16\n and 11.x before 11.0.13 on Mac OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version 10.1.16 or\n 11.0.13 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Reader/MacOSX/Version\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/reader\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"10.1\", test_version2:\"10.1.15\"))\n{\n fix = \"10.1.16\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.12\"))\n{\n fix = \"11.0.13\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + readerVer + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:36:04", "bulletinFamily": "scanner", "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "modified": "2018-10-19T00:00:00", "published": "2015-10-20T00:00:00", "id": "OPENVAS:1361412562310806503", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806503", "title": "Adobe Reader Multiple Vulnerabilities - 01 October15 (Windows)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_adobe_reader_mult_vuln01_oct15_win.nasl 11975 2018-10-19 06:54:12Z cfischer $\n#\n# Adobe Reader Multiple Vulnerabilities - 01 October15 (Windows)\n#\n# Authors:\n# Rinu Kuriakose <krinu@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806503\");\n script_version(\"$Revision: 11975 $\");\n script_cve_id(\"CVE-2015-5583\", \"CVE-2015-5586\", \"CVE-2015-6683\", \"CVE-2015-6684\",\n \"CVE-2015-6685\", \"CVE-2015-6686\", \"CVE-2015-6687\", \"CVE-2015-6688\",\n \"CVE-2015-6689\", \"CVE-2015-6690\", \"CVE-2015-6691\", \"CVE-2015-6692\",\n \"CVE-2015-6693\", \"CVE-2015-6694\", \"CVE-2015-6695\", \"CVE-2015-6696\",\n \"CVE-2015-6697\", \"CVE-2015-6698\", \"CVE-2015-6699\", \"CVE-2015-6700\",\n \"CVE-2015-6701\", \"CVE-2015-6702\", \"CVE-2015-6703\", \"CVE-2015-6704\",\n \"CVE-2015-6705\", \"CVE-2015-6706\", \"CVE-2015-6707\", \"CVE-2015-6708\",\n \"CVE-2015-6709\", \"CVE-2015-6710\", \"CVE-2015-6711\", \"CVE-2015-6712\",\n \"CVE-2015-6713\", \"CVE-2015-6714\", \"CVE-2015-6715\", \"CVE-2015-6716\",\n \"CVE-2015-6717\", \"CVE-2015-6718\", \"CVE-2015-6719\", \"CVE-2015-6720\",\n \"CVE-2015-6721\", \"CVE-2015-6722\", \"CVE-2015-6723\", \"CVE-2015-6724\",\n \"CVE-2015-6725\", \"CVE-2015-7614\", \"CVE-2015-7615\", \"CVE-2015-7616\",\n \"CVE-2015-7617\", \"CVE-2015-7618\", \"CVE-2015-7619\", \"CVE-2015-7620\",\n \"CVE-2015-7621\", \"CVE-2015-7622\", \"CVE-2015-7623\", \"CVE-2015-7624\",\n \"CVE-2015-7829\", \"CVE-2015-8458\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-19 08:54:12 +0200 (Fri, 19 Oct 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-10-20 10:15:23 +0530 (Tue, 20 Oct 2015)\");\n script_tag(name:\"qod_type\", value:\"registry\");\n script_name(\"Adobe Reader Multiple Vulnerabilities - 01 October15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws are due to:\n\n - Improper EScript exception handling.\n\n - Some use-after-free vulnerabilities.\n\n - Some buffer overflow vulnerabilities.\n\n - Some memory leak vulnerabilities.\n\n - Some security bypass vulnerabilities.\n\n - Multiple memory corruption vulnerabilities.\n\n - Some Javascript API execution restriction bypass vulnerabilities.\n\n - Mishandling of junctions in the Synchronizer directory.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow\n attackers to conduct a denial of service, unauthorized disclosure of information,\n unauthorized modification, disruption of service, bypass certain access restrictions\n and execution restrictions, to delete arbitrary files, to obtain sensitive\n information, execute arbitrary code and compromise a user's system.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader 10.1.x before 10.1.16\n and 11.x before 11.0.13 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version 10.1.16 or\n 11.0.13 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb15-24.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Reader/Win/Installed\");\n script_xref(name:\"URL\", value:\"http://get.adobe.com/reader\");\n exit(0);\n}\n\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"10.1\", test_version2:\"10.1.15\"))\n{\n fix = \"10.1.16\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.12\"))\n{\n fix = \"11.0.13\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + readerVer + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "kaspersky": [{"lastseen": "2019-03-21T00:14:08", "bulletinFamily": "info", "description": "### *Detect date*:\n10/13/2015\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple serious vulnerabilities have been found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.\n\n### *Affected products*:\nAdobe Acrobat DC Continuous track versions earlier than 2015.009.20069 \nAdobe Acrobat Reader DC Continuous track versions earlier than 2015.009.20069 \nAdobe Acrobat DC Classic track versions earlier than 2015.006.30094 \nAdobe Acrobat Reader DC Classic track versions earlier than 2015.006.30094 \nAdobe Acrobat XI versions earlier than 11.0.13 \nAdobe Acrobat Reader XI versions earlier than 11.0.13 \nAdobe Acrobat X versions earlier than 10.1.16 \nAdobe Acrobat Reader X versions earlier than 10.1.16\n\n### *Solution*:\nUpdate to the latest version \n[Get Adobe Reader](<https://get.adobe.com/reader/>)\n\n### *Original advisories*:\n[Adobe bulletin](<https://helpx.adobe.com/security/products/acrobat/apsb15-24.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Adobe Reader X](<https://threats.kaspersky.com/en/product/Adobe-Reader-X/>)\n\n### *CVE-IDS*:\n[CVE-2015-5583](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5583>)4.3Critical \n[CVE-2015-6697](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6697>)4.3Critical \n[CVE-2015-6687](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6687>)10.0Critical \n[CVE-2015-5586](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5586>)10.0Critical \n[CVE-2015-6686](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6686>)9.3Critical \n[CVE-2015-6712](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6712>)9.3Critical \n[CVE-2015-6719](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6719>)9.3Critical \n[CVE-2015-6685](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6685>)9.3Critical \n[CVE-2015-6684](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6684>)10.0Critical \n[CVE-2015-7624](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7624>)5.0Critical \n[CVE-2015-6698](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6698>)9.3Critical \n[CVE-2015-6705](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6705>)5.0Critical \n[CVE-2015-6704](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6704>)4.3Critical \n[CVE-2015-6707](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6707>)9.3Critical \n[CVE-2015-6706](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6706>)5.0Critical \n[CVE-2015-6717](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6717>)9.3Critical \n[CVE-2015-6708](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6708>)9.3Critical \n[CVE-2015-6693](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6693>)9.3Critical \n[CVE-2015-6714](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6714>)9.3Critical \n[CVE-2015-6691](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6691>)10.0Critical \n[CVE-2015-6690](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6690>)9.3Critical \n[CVE-2015-6689](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6689>)9.3Critical \n[CVE-2015-6688](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6688>)9.3Critical \n[CVE-2015-7623](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7623>)9.3Critical \n[CVE-2015-7622](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7622>)10.0Critical \n[CVE-2015-6723](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6723>)9.3Critical \n[CVE-2015-6722](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6722>)9.3Critical \n[CVE-2015-6683](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6683>)10.0Critical \n[CVE-2015-6715](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6715>)9.3Critical \n[CVE-2015-6721](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6721>)9.3Critical \n[CVE-2015-6695](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6695>)9.3Critical \n[CVE-2015-6720](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6720>)9.3Critical \n[CVE-2015-7619](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7619>)9.3Critical \n[CVE-2015-6716](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6716>)9.3Critical \n[CVE-2015-6718](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6718>)9.3Critical \n[CVE-2015-6710](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6710>)9.3Critical \n[CVE-2015-6709](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6709>)9.3Critical \n[CVE-2015-6725](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6725>)9.3Critical \n[CVE-2015-7616](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7616>)9.3Critical \n[CVE-2015-7617](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7617>)9.3Critical \n[CVE-2015-7618](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7618>)9.3Critical \n[CVE-2015-6699](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6699>)4.3Critical \n[CVE-2015-6724](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6724>)9.3Critical \n[CVE-2015-6711](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6711>)9.3Critical \n[CVE-2015-7614](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7614>)9.3Critical \n[CVE-2015-7615](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7615>)9.3Critical \n[CVE-2015-6696](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6696>)10.0Critical \n[CVE-2015-6692](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6692>)5.0Critical \n[CVE-2015-7620](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7620>)9.3Critical \n[CVE-2015-7621](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7621>)9.3Critical \n[CVE-2015-6702](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6702>)4.3Critical \n[CVE-2015-6703](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6703>)4.3Critical \n[CVE-2015-6700](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6700>)5.0Critical \n[CVE-2015-6713](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6713>)9.3Critical \n[CVE-2015-6694](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6694>)9.3Critical \n[CVE-2015-6701](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6701>)4.3Critical", "modified": "2019-03-07T00:00:00", "published": "2015-10-13T00:00:00", "id": "KLA10682", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10682", "title": "\r KLA10682Multiple vulnerabilities in Adobe Acrobat and Reader ", "type": "kaspersky", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}