Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 or 11.0.07. It is, therefore, affected by multiple vulnerabilities :

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2014-0511)

  - A security bypass vulnerability exists due to improper     validation of input. (CVE-2014-0512)

  - An information disclosure vulnerability exists in the     implementation of the JavaScript APIs. (CVE-2014-0521)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2014-0522,     CVE-2014-0523, CVE-2014-0524, CVE-2014-0526)

  - A code execution vulnerability exists due to a failure     to prevent access to unmapped memory. An attacker can     exploit this to execute arbitrary code via unspecified     API calls. (CVE-2014-0525)

  - A use-after-free error exists that allows an attacker to     execute arbitrary code. (CVE-2014-0527)

  - A double-free error exists that allows an attacker to     execute arbitrary code. (CVE-2014-0528)

  - A buffer overflow condition exists that allows an     attacker to execute arbitrary code. (CVE-2014-0529)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.10 / 11.0.7. It is, therefore, affected by multiple vulnerabilities :

  - A heap overflow vulnerability exists that could lead to     code execution. (CVE-2014-0511)

  - A security bypass vulnerability exists with input     validation. (CVE-2014-0512)

  - An information disclosure vulnerability exists with the     JavaScript APIs. (CVE-2014-0521)

  - Multiple memory corruption vulnerabilities exists that     could lead to code execution. (CVE-2014-0522,     CVE-2014-0523, CVE-2014-0524, CVE-2014-0526)

  - A vulnerability exists with how Reader handles a certain     API call that could lead to code execution.
    (CVE-2014-0525)

  - A use-after-free vulnerability exists that could lead     to code execution. (CVE-2014-0527)

  - A double-free vulnerability exists that could lead to     code execution. (CVE-2014-0528)

  - A buffer overflow vulnerability exists that could lead     to code execution. (CVE-2014-0529)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 / 11.0.07. It is, therefore, affected by multiple vulnerabilities :

  - A heap overflow vulnerability exists that could lead to     code execution. (CVE-2014-0511)

  - A security bypass vulnerability exists with input     validation. (CVE-2014-0512)

  - An information disclosure vulnerability exists with the     JavaScript APIs. (CVE-2014-0521)

  - Multiple memory corruption vulnerabilities exists that     could lead to code execution. (CVE-2014-0522,     CVE-2014-0523, CVE-2014-0524, CVE-2014-0526)

  - A vulnerability exists with how Reader handles a certain     API call that could lead to code execution.
    (CVE-2014-0525)

  - A use-after-free vulnerability exists that could lead     to code execution. (CVE-2014-0527)

  - A double-free vulnerability exists that could lead to     code execution. (CVE-2014-0528)

  - A buffer overflow vulnerability exists that could lead     to code execution. (CVE-2014-0529)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.10 / 11.0.07. It is, therefore, affected by multiple vulnerabilities :

  - A heap overflow vulnerability exists that could lead to     code execution. (CVE-2014-0511)

  - A security bypass vulnerability exists with input     validation. (CVE-2014-0512)

  - An information disclosure vulnerability exists with the     JavaScript APIs. (CVE-2014-0521)

  - Multiple memory corruption vulnerabilities exists that     could lead to code execution. (CVE-2014-0522,     CVE-2014-0523, CVE-2014-0524, CVE-2014-0526)

  - A vulnerability exists with how Reader handles a certain     API call that could lead to code execution.
    (CVE-2014-0525)

  - An use-after-free vulnerability exists that could lead     to code execution. (CVE-2014-0527)

  - A double-free vulnerability exists that could lead to     code execution. (CVE-2014-0528)

  - A buffer overflow vulnerability exists that could lead     to code execution. (CVE-2014-0529)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
74014	Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical
74013	Adobe Acrobat < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical
74012	Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15)	Nessus	Windows	Local	critical
74011	Adobe Acrobat < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2014-0511

critical

Tenable Plugins

critical

critical

critical

critical