Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a memory address leak vulnerability. Successful exploitation could lead to information disclosure .

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3807)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3792,     CVE-2020-3793, CVE-2020-3801, CVE-2020-3802, CVE-2020-3805)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read     vulnerability. Successful exploitation could lead to information disclosure . (CVE-2020-3804,     CVE-2020-3806)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds write     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3795)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3807)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3792,     CVE-2020-3793, CVE-2020-3801, CVE-2020-3802, CVE-2020-3805)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read     vulnerability. Successful exploitation could lead to information disclosure . (CVE-2020-3804,     CVE-2020-3806)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds write     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3795)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3807)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3792,     CVE-2020-3793, CVE-2020-3801, CVE-2020-3802, CVE-2020-3805)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read     vulnerability. Successful exploitation could lead to information disclosure . (CVE-2020-3804,     CVE-2020-3806)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds write     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3795)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3807)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3792,     CVE-2020-3793, CVE-2020-3801, CVE-2020-3802, CVE-2020-3805)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read     vulnerability. Successful exploitation could lead to information disclosure . (CVE-2020-3804,     CVE-2020-3806)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds write     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3795)

  - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158     and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow     vulnerability. Successful exploitation could lead to arbitrary code execution . (CVE-2020-3799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
134706	Adobe Reader < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13)	Nessus	Windows	Local	critical
134705	Adobe Acrobat < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13)	Nessus	Windows	Local	critical
134704	Adobe Reader < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13) (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
134703	Adobe Acrobat < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13) (macOS)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2020-3800

high

Tenable Plugins

critical

critical

critical

critical