Re: Adobe Acrobat < 6.0.5 Plug 22035 Question

[Brad Nelson <nelson.brad@comcast.net>]

Does this need to be a scan with credentials to work?  Without 
credentials how does the plugin determine if the .dll is installed and 
which version is present?  thanks, brad
jfvanmeter@comcast.net wrote:
> I have a problem with a scan of a workstation that has Acrobat 6.0.5 installed. In my report I see: 
> ----------------------------------------------------------------------------------------------------------------------------
> Plugin output :
>
> Version 6.0.1.1081 of the Adobe Acrobat distiller is installed as :
> C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroDistDLL.dll
>
> CVE : CVE-2006-3453, CVE-2006-3453, CVE-2006-3453
> BID : 18943, 18943, 18943
> Plugin ID : 22035
> ---------------------------------------------------------------------------------------------------------------------------
>
> Looking at the source code for plugin 22035 I see that 
>
> Determine where it's installed.
> key = "SOFTWARE\Classes\Software\Adobe\Acrobat\Distiller";
>
> Then determines the version
> # There's a problem if the version is < 6.0.5.
> if (!isnull(ver))
> {
> if (
> ver[0] < 6 ||
> (ver[0] == 6 && ver[1] == 0 && ver[2] < 5)
> )
> {
> if (report_verbosity < 1) report = desc;
> else 
> {
> version = string(ver[0], ".", ver[1], ".", ver[2], ".", ver[3]);
> report = string(
> desc,
> "\n\n",
> "Plugin output :\n",
> "\n",
> "Version ", version, " of the Adobe Acrobat distiller is installed as :\n",
> " ", dll, "\n"
> );
> }
> ----------------------------------------------------------------------------------------------------------------------------
> I've manually verified that the acrobat.exe is at version 6.0.5.399,  the Solution :  states to Upgrade to Adobe Acrobat 6.0.5 or later; which the workstation has installed. 
> The version of the AcroDistDLL.dll is 6.0.1.1081. Does the plug check the version of  AcroDistDLL.dll or acrobat.exe?
> Thank You in advance --John
> _______________________________________________
> Nessus mailing list
> Nessus@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/nessus
>
>   
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus