Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when a resource is accessed using a type that is not compatible with the actual object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30680 or 24.003.20112. It is, therefore, affected by multiple vulnerabilities.

  - Access of Resource Using Incompatible Type ('Type Confusion') potentially leading to Arbitrary code     execution (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current     user. This issue occurs when a resource is accessed using a type that is not compatible with the actual     object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Use After Free vulnerability that could result in arbitrary code execution in the context of the current     user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2024-41869)

  - Use After Free potentially leading to Arbitrary code execution (CVE-2024-41869)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30680, 24.001.30187, or 24.003.20112. It is, therefore, affected by multiple vulnerabilities.

  - Access of Resource Using Incompatible Type ('Type Confusion') potentially leading to Arbitrary code     execution (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current     user. This issue occurs when a resource is accessed using a type that is not compatible with the actual     object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Use After Free vulnerability that could result in arbitrary code execution in the context of the current     user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2024-41869)

  - Use After Free potentially leading to Arbitrary code execution (CVE-2024-41869)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30680 or 24.003.20112. It is, therefore, affected by multiple vulnerabilities.

  - Access of Resource Using Incompatible Type ('Type Confusion') potentially leading to Arbitrary code     execution (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current     user. This issue occurs when a resource is accessed using a type that is not compatible with the actual     object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Use After Free vulnerability that could result in arbitrary code execution in the context of the current     user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2024-41869)

  - Use After Free potentially leading to Arbitrary code execution (CVE-2024-41869)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30680, 24.001.30187, or 24.003.20112. It is, therefore, affected by multiple vulnerabilities.

  - Access of Resource Using Incompatible Type ('Type Confusion') potentially leading to Arbitrary code     execution (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current     user. This issue occurs when a resource is accessed using a type that is not compatible with the actual     object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2024-45112)

  - Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by     a Use After Free vulnerability that could result in arbitrary code execution in the context of the current     user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2024-41869)

  - Use After Free potentially leading to Arbitrary code execution (CVE-2024-41869)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207074	Adobe Reader < 20.005.30680 / 24.003.20112 Multiple Vulnerabilities (APSB24-70) (macOS)	Nessus	MacOS X Local Security Checks	high
207073	Adobe Acrobat < 20.005.30680 / 24.001.30187 / 24.003.20112 Multiple Vulnerabilities (APSB24-70) (macOS)	Nessus	MacOS X Local Security Checks	high
207072	Adobe Reader < 20.005.30680 / 24.003.20112 Multiple Vulnerabilities (APSB24-70)	Nessus	Windows	high
207071	Adobe Acrobat < 20.005.30680 / 24.001.30187 / 24.003.20112 Multiple Vulnerabilities (APSB24-70)	Nessus	Windows	high

Detections

Analytics

CVE-2024-45112

high

Tenable Plugins

high

high

high

high