Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)

This script is Copyright (C) 2013-2016 Tenable Network Security, Inc.


Synopsis :

The version of Adobe Reader on the remote Mac OS X host is affected by
multiple vulnerabilities.

Description :

The version of Adobe Reader installed on the remote Mac OS X host is
prior to 11.0.2, 10.1.6, or 9.5.4. It is, therefore, affected by the
following vulnerabilities :

- An unspecified memory corruption issue exists that
allows a remote attacker to cause a denial of service or
execute arbitrary code via a crafted PDF document.
(CVE-2013-0640)

- An unspecified buffer overflow condition exists that
allows a remote attacker to execute arbitrary code via
a crafted PDF document. (CVE-2013-0641)

Note that Nessus has not tested for these issues but has instead
relied only on the application's self-reported version number.

See also :

http://www.adobe.com/support/security/advisories/apsa13-02.html
http://www.adobe.com/support/security/bulletins/apsb13-07.html

Solution :

Upgrade to Adobe Reader version 11.0.2 / 10.1.6 / 9.5.4 or later.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.3
(CVSS2#E:POC/RL:OF/RC:C)
Public Exploit Available : true

Family: MacOS X Local Security Checks

Nessus Plugin ID: 64787 ()

Bugtraq ID: 57931
57947

CVE ID: CVE-2013-0640
CVE-2013-0641

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial