The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30514.10514 or 23.003.20269.
It is, therefore, affected by multiple vulnerabilities.

  - Improper Access Control (CWE-284) potentially leading to Security feature bypass (CVE-2023-29320)

  - Improper Input Validation (CWE-20) potentially leading to Application denial-of-service (CVE-2023-29299)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-29303, CVE-2023-38238,     CVE-2023-38243)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-38222, CVE-2023-38224,     CVE-2023-38225, CVE-2023-38227, CVE-2023-38228)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2023-38223,     CVE-2023-38226, CVE-2023-38234, CVE-2023-38246)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory Leak (CVE-2023-38229, CVE-2023-38232,     CVE-2023-38235)

  - Use After Free (CWE-416) potentially leading to Memory Leak (CVE-2023-38230)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-38231,     CVE-2023-38233)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-38236, CVE-2023-38237,     CVE-2023-38239, CVE-2023-38240, CVE-2023-38241, CVE-2023-38242, CVE-2023-38244, CVE-2023-38247,     CVE-2023-38248)

  - Improper Input Validation (CWE-20) potentially leading to Arbitrary code execution (CVE-2023-38245)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)

high Nessus Plugin ID 179483

Version 1.4

Version 1.3

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Oct 16, 2023, 7:25 PM Plugin categorization Plugin Feed: 202310161925
Version 1.3 Sep 15, 2023, 10:10 AM IAVM reference Plugin Feed: 202309151010
Version 1.3 Oct 16, 2023, 5:15 PM Plugin categorization Plugin Feed: 202310161715
Version 1.2 Aug 14, 2023, 2:03 PM CVSS metrics ("CVSSv2 score" changed from 7.5 to 7.2. "CVSSv3 score" changed from 9.8 to 7.8. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2023-38246") Plugin Feed: 202308141403
Version 1.1 Aug 11, 2023, 12:07 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202308111207
Version 1.0 Aug 9, 2023, 12:14 AM New Plugin Feed: 202308090014