Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FileAttachment annotation, a different vulnerability than CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0945. (CVE-2016-0946)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0946. (CVE-2016-0945)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0944)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0942)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory     corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933,     CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
    (CVE-2016-0939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0945. (CVE-2016-0946)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0946. (CVE-2016-0945)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0944)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0942)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory     corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933,     CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
    (CVE-2016-0939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Mac OS X host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-0932,     CVE-2016-0934, CVE-2016-0937, CVE-2016-0940,     CVE-2016-0941)

  - Multiple memory corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-0931, CVE-2016-0933, CVE-2016-0936,     CVE-2016-0938, CVE-2016-0939, CVE-2016-0942,     CVE-2016-0944, CVE-2016-0945, CVE-2016-0946)

  - Multiple double-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-0935,     CVE-2016-1111)

  - A flaw exists in the Global JavaScript API that allows     a remote attacker to bypass restrictions and execute     arbitrary code. (CVE-2016-0943)

  - A flaw exists in the download manager related to the     directory search path used to find resources. A remote     attacker can exploit this execute arbitrary code.
    (CVE-2016-0947)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Mac OS X host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-0932,     CVE-2016-0934, CVE-2016-0937, CVE-2016-0940,     CVE-2016-0941)

  - Multiple memory corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-0931, CVE-2016-0933, CVE-2016-0936,     CVE-2016-0938, CVE-2016-0939, CVE-2016-0942,     CVE-2016-0944, CVE-2016-0945, CVE-2016-0946)

  - Multiple double-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-0935,     CVE-2016-1111)

  - A flaw exists in the Global JavaScript API that allows     a remote attacker to bypass restrictions and execute     arbitrary code. (CVE-2016-0943)

  - A flaw exists in the download manager related to the     directory search path used to find resources. A remote     attacker can exploit this execute arbitrary code.
    (CVE-2016-0947)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0945. (CVE-2016-0946)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0946. (CVE-2016-0945)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0944)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0942)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory     corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933,     CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
    (CVE-2016-0939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0945. (CVE-2016-0946)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0944, and CVE-2016-0946. (CVE-2016-0945)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0942, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0944)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a     different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939,     CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946. (CVE-2016-0942)

  - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and     Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to     execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory     corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933,     CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
    (CVE-2016-0939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
209470	Adobe Acrobat < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
209468	Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
87920	Adobe Reader < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical
87919	Adobe Acrobat < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical
87918	Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)	Nessus	Windows	Local	critical
87917	Adobe Acrobat < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2016-0931

high

Tenable Plugins

critical

critical

critical

critical

critical

critical