Adobe Reader Unsupported Version Detection

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(56213);
  script_version("1.15");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/08");

  script_xref(name:"IAVA", value:"0001-A-0512");

  script_name(english:"Adobe Reader Unsupported Version Detection");
  script_summary(english:"Checks the Adobe Reader version.");

  script_set_attribute(attribute:"synopsis", value:
"The remote host contains an unsupported version of Adobe Reader.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the installation of Adobe
Reader on the remote Windows host is no longer supported.

Lack of support implies that no new security patches for the product
will be released by the vendor. As a result, it is likely to contain
security vulnerabilities.");
  #http://prodesigntools.com/adobe-acrobat-dc-document-cloud.html 
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d63c933d");
  script_set_attribute(attribute:"see_also", value:"http://www.adobe.com/support/programs/policies/supported.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Adobe Reader that is currently supported.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"manual");
  script_set_attribute(attribute:"cvss_score_rationale", value:"Tenable score for unsupported software.");

  script_set_attribute(attribute:"plugin_publication_date", value:"2011/09/15");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:adobe:acrobat_reader");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2011-2026 Tenable Network Security, Inc.");

  script_dependencies("adobe_reader_installed.nasl");
  script_require_keys("SMB/Acroread/Version");

  exit(0);
}

var app = "Adobe Reader";
var versions = get_kb_list('SMB/Acroread/Version');
if (isnull(versions)) exit(0, 'The "SMB/Acroread/Version" KB list is missing.');

var eos_dates = make_array(
  '20', 'November 30, 2025',
  '17', 'June 6, 2022',
  '15', 'July 7, 2020',
  '11', 'October 15, 2017',
  '10', 'November 18, 2015',
  '9',  'June 26, 2013',
  '8',  'November 3, 2011',
  '7', '',
  '6', '',
  '5', '',
  '4', '',
  '3', '',
  '2', '',
  '1', ''
);
var withdrawl_announcements = make_array(
  '20', 'https://helpx.adobe.com/acrobat/kb/end-of-support-acrobat-2020.html',
  '17', 'https://helpx.adobe.com/acrobat/kb/end-of-support-acrobat-2017-reader-2017.html',
  '15', 'https://blog.adobe.com/en/publish/2019/11/18/adobe-acrobat-2015-and-adobe-reader-2015-end-of-support',
  '11', 'https://helpx.adobe.com/acrobat/kb/end-of-support-acrobat-xi-reader-xi.html',
  '10', 'https://helpx.adobe.com/acrobat/kb/end-of-support-acrobat-x-reader-x.html',
  '9',  'https://helpx.adobe.com/acrobat/kb/end-support-acrobat-8-reader.html', #Actual content is for 9
  '8',  'http://blogs.adobe.com/adobereader/2011/09/adobe-reader-and-acrobat-version-8-end-of-support.html'
);
var supported_versions = 'Acrobat Reader DC / Acrobat Reader 2024';


var info = "";
var info2 = "";
var version, path, report_version, ver, version_highlevel, i, v, port, be;

foreach version (versions)
{
  path   = get_kb_item("SMB/Acroread/"+version+"/Path");
  report_version = get_kb_item("SMB/Acroread/"+version+"/Version_UI");
  if (isnull(report_version))
    report_version = version;

  ver = split(version, sep:".", keep:FALSE);
  for (i=0; i<max_index(ver); i++)
    ver[i] = int(ver[i]);
  version_highlevel = ver[0];

  foreach v (keys(eos_dates))
  {
    if (v == version_highlevel)
    {
      register_unsupported_product(product_name:"Adobe Acrobat Reader", version:report_version, cpe_base:"adobe:acrobat_reader");

      info +=
        '\n  Path                : ' + path +
        '\n  Installed version   : ' + report_version;
      if (eos_dates[version_highlevel])
        info += '\n  End of support date : ' + eos_dates[version_highlevel];
      if (withdrawl_announcements[version_highlevel])
        info += '\n  Announcement        : ' + withdrawl_announcements[version_highlevel];
      info += '\n  Supported versions  : ' + supported_versions + '\n';
      break;
    }
  }
  info2 += " and " + report_version;
}

if (info)
{
  port = get_kb_item("SMB/transport");
  if (!port) port = 445;

  if (report_verbosity > 0) security_hole(port:port, extra:info);
  else security_hole(port);

  exit(0);
}

if (info2)
{
 info2 -= " and ";
  if (" and " >< info2) be = "are";
  else be = "is";

  exit(0, "The host is not affected since Adobe Reader " + info2 + " " + be + " installed.");
}
else exit(1, "Unexpected error - 'info2' is empty.");