{"enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2016-4251"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310808581", "OPENVAS:1361412562310808583", "OPENVAS:1361412562310808584", "OPENVAS:1361412562310808582"]}, {"type": "nessus", "idList": ["MACOSX_ADOBE_ACROBAT_APSB16-26.NASL", "ADOBE_ACROBAT_APSB16-26.NASL", "ADOBE_READER_APSB16-26.NASL", "MACOSX_ADOBE_READER_APSB16-26.NASL"]}, {"type": "kaspersky", "idList": ["KLA10838"]}], "modified": "2020-06-22T11:42:02", "rev": 2}, "score": {"value": 7.4, "vector": "NONE", "modified": "2020-06-22T11:42:02", "rev": 2}, "vulnersScore": 7.4}, "edition": 3, "href": "https://www.zerodayinitiative.com/advisories/ZDI-16-421/", "modified": "2016-06-22T00:00:00", "published": "2016-07-12T00:00:00", "description": "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of FlateDecode streams. A crafted FlateDecode stream can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.", "bulletinFamily": "info", "viewCount": 1, "title": "Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability", "references": ["https://helpx.adobe.com/security/products/acrobat/apsb16-26.html"], "cvelist": ["CVE-2016-4251"], "type": "zdi", "id": "ZDI-16-421", "lastseen": "2020-06-22T11:42:02", "reporter": "Jaanus Kp Clarified Security", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "scheme": null, "immutableFields": []}

{"cve": [{"lastseen": "2021-02-02T06:28:07", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4252, and CVE-2016-4254.", "edition": 6, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2016-07-13T02:00:00", "title": "CVE-2016-4251", "type": "cve", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4251"], "modified": "2017-09-01T01:29:00", "cpe": ["cpe:/a:adobe:acrobat_dc:15.016.20045", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045"], "id": "CVE-2016-4251", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4251", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*"]}], "openvas": [{"lastseen": "2019-07-17T14:25:39", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2016-07-14T00:00:00", "id": "OPENVAS:1361412562310808584", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808584", "type": "openvas", "title": "Adobe Acrobat Security Updates(apsb16-26)-MAC OS X", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Security Updates(apsb16-26)-MAC OS X\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808584\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6938\", \"CVE-2016-6937\");\n script_bugtraq_id(91716, 91712, 91714, 93014, 93016);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Acrobat Security Updates(apsb16-26)-MAC OS X\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat version 11.x before 11.0.17 on MAC OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:41", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2016-07-14T00:00:00", "id": "OPENVAS:1361412562310808583", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808583", "type": "openvas", "title": "Adobe Acrobat Security Updates(apsb16-26)-Windows", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Security Updates(apsb16-26)-Windows\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808583\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Acrobat Security Updates(apsb16-26)-Windows\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat version 11.x before 11.0.17 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:06", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2016-07-14T00:00:00", "id": "OPENVAS:1361412562310808581", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808581", "type": "openvas", "title": "Adobe Reader Security Updates(apsb16-26)-Windows", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Reader Security Updates(apsb16-26)-Windows\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808581\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Reader Security Updates(apsb16-26)-Windows\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader version 11.x before 11.0.17 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Reader/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:55", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2016-07-14T00:00:00", "id": "OPENVAS:1361412562310808582", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808582", "type": "openvas", "title": "Adobe Reader Security Updates(apsb16-26)-MAC OS X", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Reader Security Updates(apsb16-26)-MAC OS X\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808582\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Reader Security Updates(apsb16-26)-MAC OS X\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader version 11.x before 11.0.17 on MAC OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Reader/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "kaspersky": [{"lastseen": "2020-09-02T11:59:37", "bulletinFamily": "info", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "description": "### *Detect date*:\n07/12/2016\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions or cause a denial of service.\n\n### *Affected products*:\nAdobe Acrobat DC Continuous versions earlier than 15.017.20050 \nAdobe Acrobat Reader DC Continuous versions earlier than 15.017.20050 \nAdobe Acrobat DC Classic versions earlier than 15.006.30198 \nAdobe Acrobat Reader DC Classic versions earlier than 15.006.30198 \nAdobe Acrobat XI versions earlier than 11.0.17 \nAdobe Reader XI versions earlier than 11.0.17\n\n### *Solution*:\nUpdate to the latest version \n[Get Adobe Reader](<https://get.adobe.com/reader/>)\n\n### *Original advisories*:\n[Adobe security advisory](<https://helpx.adobe.com/security/products/acrobat/apsb16-26.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Adobe Reader XI](<https://threats.kaspersky.com/en/product/Adobe-Reader-XI/>)\n\n### *CVE-IDS*:\n[CVE-2016-4255](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4255>)6.8High \n[CVE-2016-4254](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4254>)10.0Critical \n[CVE-2016-4252](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4252>)10.0Critical \n[CVE-2016-4251](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4251>)10.0Critical \n[CVE-2016-4250](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4250>)10.0Critical \n[CVE-2016-4202](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4202>)6.8High \n[CVE-2016-4203](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4203>)10.0Critical \n[CVE-2016-4204](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4204>)10.0Critical \n[CVE-2016-4205](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4205>)10.0Critical \n[CVE-2016-4206](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4206>)10.0Critical \n[CVE-2016-4207](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4207>)10.0Critical \n[CVE-2016-4209](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4209>)10.0Critical \n[CVE-2016-4210](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4210>)10.0Critical \n[CVE-2016-4191](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4191>)10.0Critical \n[CVE-2016-4192](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4192>)10.0Critical \n[CVE-2016-4193](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4193>)10.0Critical \n[CVE-2016-4194](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4194>)10.0Critical \n[CVE-2016-4195](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4195>)6.8High \n[CVE-2016-4196](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4196>)6.8High \n[CVE-2016-4197](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4197>)6.8High \n[CVE-2016-4198](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4198>)6.8High \n[CVE-2016-4199](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4199>)6.8High \n[CVE-2016-4200](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4200>)6.8High \n[CVE-2016-4201](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4201>)10.0Critical \n[CVE-2016-4265](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4265>)10.0Critical \n[CVE-2016-4266](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4266>)10.0Critical \n[CVE-2016-4267](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4267>)10.0Critical \n[CVE-2016-4268](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4268>)10.0Critical \n[CVE-2016-4269](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4269>)10.0Critical \n[CVE-2016-4270](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4270>)10.0Critical \n[CVE-2016-4208](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4208>)10.0Critical \n[CVE-2016-6938](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6938>)10.0Critical \n[CVE-2016-6937](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6937>)10.0Critical \n[CVE-2016-4211](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4211>)10.0Critical \n[CVE-2016-4212](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4212>)10.0Critical \n[CVE-2016-4213](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4213>)10.0Critical \n[CVE-2016-4214](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4214>)10.0Critical \n[CVE-2016-4215](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4215>)10.0Critical\n\n### *Exploitation*:\nThe following public exploits exists for this vulnerability:", "edition": 42, "modified": "2020-06-18T00:00:00", "published": "2016-07-12T00:00:00", "id": "KLA10838", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10838", "title": "\r KLA10838Multiple vulnerabilities in Adobe Acrobat & Reader ", "type": "kaspersky", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2021-04-01T03:42:31", "description": "The version of Adobe Acrobat installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.", "edition": 30, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "title": "Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:adobe:acrobat"], "id": "MACOSX_ADOBE_ACROBAT_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92036", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92036);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2019/11/19\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat version 11.0.17 / 15.006.30198 / 15.017.20050\nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_acrobat_installed.nbin\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:0, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T01:16:55", "description": "The version of Adobe Acrobat installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.", "edition": 32, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "title": "Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:adobe:acrobat"], "id": "ADOBE_ACROBAT_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92034", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92034);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/14\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat version 11.0.17 / 15.006.30198 / 15.017.20050\nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_acrobat_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\nverui = install['display_version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n\n report = '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T01:18:27", "description": "The version of Adobe Reader installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.", "edition": 32, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "title": "Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:adobe:acrobat_reader"], "id": "ADOBE_READER_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92035", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92035);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/14\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader version 11.0.17 / 15.006.30198 / 15.017.20050 \nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_reader_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\n# NOTE: For this version of Reader, the AcroRd32.dll file was only\n# updated to reflect the proper version. The normal EXE was\n# not updated, so we have to look at the DLL.\n# The detection plugin will not report the proper version.\nversion = install['DLL_Product_Version']; # DLL version - not EXE\npath = install['path'];\nverui = install['DLL_Display_Version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n\n report = '\\n Note: The Adobe Reader version was extracted from AcroRd32.dll.' +\n '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T03:43:30", "description": "The version of Adobe Reader installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.", "edition": 30, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "title": "Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:adobe:acrobat_reader"], "id": "MACOSX_ADOBE_READER_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92037", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92037);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2019/11/19\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader version 11.0.17 / 15.006.30198 / 15.017.20050 \nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_reader_installed.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:0, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}]}