Lucene search
+L

Adobe Acrobat 2017 Security Update (APSB22-39) - Mac OS X

🗓️ 11 Aug 2022 00:00:00Reported by Copyright (C) 2022 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 18 Views

Adobe Acrobat 2017 Security Update for Mac OS X - Multiple Flaw

Related
Refs
Code
ReporterTitlePublishedViews
Family
nessus
Tenable Nessus
Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)
9 Aug 202200:00
nessus
nessus
Tenable Nessus
Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)
9 Aug 202200:00
nessus
nessus
Tenable Nessus
Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39) (macOS)
9 Aug 202200:00
nessus
nessus
Tenable Nessus
Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39) (macOS)
9 Aug 202200:00
nessus
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in their memory management after freeing memory. This allows attackers to gain unauthorized access to protected information.
24 Aug 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.
24 Aug 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in the fact that the write-off operation beyond the buffer is possible in memory, allowing an attacker to execute arbitrary code.
24 Aug 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
24 Aug 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.
24 Aug 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.
24 Aug 202200:00
bdu_fstec
Rows per page
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:adobe:acrobat";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.826412");
  script_version("2025-09-12T05:38:45+0000");
  script_cve_id("CVE-2022-35665", "CVE-2022-35666", "CVE-2022-35667", "CVE-2022-35668",
                "CVE-2022-35670", "CVE-2022-35671", "CVE-2022-35678");
  script_tag(name:"cvss_base", value:"7.2");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2025-09-12 05:38:45 +0000 (Fri, 12 Sep 2025)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2022-08-11 15:29:00 +0000 (Thu, 11 Aug 2022)");
  script_tag(name:"creation_date", value:"2022-08-11 10:47:36 +0530 (Thu, 11 Aug 2022)");
  script_name("Adobe Acrobat 2017 Security Update (APSB22-39) - Mac OS X");

  script_tag(name:"summary", value:"Adobe Acrobat Reader is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws are due to:

  - Multiple use-after-free errors.

  - Multiple Improper Input Validation.

  - out-of-bounds read errors.

  - out-of-bounds write error.");

  script_tag(name:"impact", value:"Successful exploitation will allow attackers
  to execute arbitrary code and leak memory on the target system.");

  script_tag(name:"affected", value:"Adobe Acrobat 2017 17.012.30249 and earlier
  versions on Mac OS X.");

  script_tag(name:"solution", value:"Update Adobe Acrobat 2017 to version
  17.012.30262 or later.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name:"URL", value:"https://helpx.adobe.com/security/products/acrobat/apsb22-39.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2022 Greenbone AG");
  script_family("General");
  script_dependencies("secpod_adobe_prdts_detect_macosx.nasl");
  script_mandatory_keys("Adobe/Acrobat/MacOSX/Version");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_in_range(version:vers, test_version:"17.0", test_version2:"17.012.30249")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"17.012.30262 or later", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation