Lucene search
+L

Adobe Acrobat DC (Classic Track) Security Updates (APSB19-07) - Windows

🗓️ 14 Feb 2019 00:00:00Reported by Copyright (C) 2019 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 33 Views

Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities. Impact includes arbitrary code execution, privilege escalation, and access to sensitive information. Upgrade to version 2015.006.30475 or later

Related
Refs
Code
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Type Confusion in Adobe Acrobat_Dc
25 Oct 202511:16
githubexploit
nessus
Tenable Nessus
Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)
15 Feb 201900:00
nessus
nessus
Tenable Nessus
Adobe Reader < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)
15 Feb 201900:00
nessus
nessus
Tenable Nessus
Adobe Acrobat < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
15 Feb 201900:00
nessus
nessus
Tenable Nessus
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
15 Feb 201900:00
nessus
nessus
Tenable Nessus
Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)
12 Sep 202400:00
nessus
nessus
Tenable Nessus
Adobe Reader < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)
12 Sep 202400:00
nessus
adobe
Adobe
APSB19-02 Security Updates Available for Adobe Acrobat and Reader
3 Jan 201900:00
adobe
adobe
Adobe
APSB19-13 Security Updates available for Adobe Acrobat and Reader
21 Feb 201900:00
adobe
bdu_fstec
BDU FSTEC
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
9 Jul 202000:00
bdu_fstec
Rows per page
# SPDX-FileCopyrightText: 2019 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:adobe:acrobat_dc_classic";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.814852");
  script_version("2025-09-12T05:38:45+0000");
  script_cve_id("CVE-2018-19725", "CVE-2019-7018", "CVE-2019-7019", "CVE-2019-7020",
                "CVE-2019-7021", "CVE-2019-7022", "CVE-2019-7023", "CVE-2019-7024",
                "CVE-2019-7025", "CVE-2019-7026", "CVE-2019-7027", "CVE-2019-7028",
                "CVE-2019-7029", "CVE-2019-7030", "CVE-2019-7031", "CVE-2019-7032",
                "CVE-2019-7033", "CVE-2019-7034", "CVE-2019-7035", "CVE-2019-7036",
                "CVE-2019-7037", "CVE-2019-7038", "CVE-2019-7039", "CVE-2019-7040",
                "CVE-2019-7041", "CVE-2019-7042", "CVE-2019-7043", "CVE-2019-7044",
                "CVE-2019-7045", "CVE-2019-7046", "CVE-2019-7047", "CVE-2019-7048",
                "CVE-2019-7049", "CVE-2019-7050", "CVE-2019-7051", "CVE-2019-7052",
                "CVE-2019-7053", "CVE-2019-7054", "CVE-2019-7055", "CVE-2019-7056",
                "CVE-2019-7057", "CVE-2019-7058", "CVE-2019-7059", "CVE-2019-7060",
                "CVE-2019-7062", "CVE-2019-7063", "CVE-2019-7064", "CVE-2019-7065",
                "CVE-2019-7066", "CVE-2019-7067", "CVE-2019-7068", "CVE-2019-7069",
                "CVE-2019-7070", "CVE-2019-7071", "CVE-2019-7072", "CVE-2019-7073",
                "CVE-2019-7074", "CVE-2019-7075", "CVE-2019-7076", "CVE-2019-7077",
                "CVE-2019-7078", "CVE-2019-7079", "CVE-2019-7080", "CVE-2019-7081",
                "CVE-2019-7082", "CVE-2019-7083", "CVE-2019-7084", "CVE-2019-7085",
                "CVE-2019-7086", "CVE-2019-7087", "CVE-2019-7089");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2025-09-12 05:38:45 +0000 (Fri, 12 Sep 2025)");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2020-08-24 17:37:00 +0000 (Mon, 24 Aug 2020)");
  script_tag(name:"creation_date", value:"2019-02-14 11:35:46 +0530 (Thu, 14 Feb 2019)");
  script_name("Adobe Acrobat DC (Classic Track) Security Updates (APSB19-07) - Windows");

  script_tag(name:"summary", value:"Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist due to:

  - Multiple buffer errors.

  - A data leakage error.

  - An integer overflow error.

  - Multiple out-of-bounds read errors.

  - Multiple security bypass errors.

  - Multiple out-of-bounds write errors.

  - Multiple type confusion errors.

  - Multiple untrusted pointer dereference errors.

  - Multiple use after free errors.");

  script_tag(name:"impact", value:"Successful exploitation will allow an
  attacker to execute arbitrary code in the context of the current user,
  escalate privileges and gain access to sensitive information.");

  script_tag(name:"affected", value:"Adobe Acrobat DC Classic 2015 version 2015.x
  before 2015.006.30464 on Windows.");

  script_tag(name:"solution", value:"Upgrade to Adobe Acrobat DC Classic 2015 version
  2015.006.30475 or later. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"registry");
  script_xref(name:"URL", value:"https://helpx.adobe.com/security/products/acrobat/apsb19-07.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2019 Greenbone AG");
  script_family("General");
  script_dependencies("gb_adobe_acrobat_dc_classic_detect_win.nasl");
  script_mandatory_keys("Adobe/AcrobatDC/Classic/Win/Ver");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

## 2015.006.30475 == 15.006.30475
if(version_is_less(version:vers, test_version:"15.006.30475")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"15.006.30475 (2015.006.30475)", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Sep 2025 00:00Current
9.1High risk
Vulners AI Score9.1
CVSS 3.19.8
CVSS 210
CVSS 39.8
EPSS0.44778
33