An unsupported Adobe Acrobat Pro version must not be installed.

From Adobe Acrobat Pro XI Security Technical Implementation Guide

Part of SRG-APP-000516

SV-93763r1_rule An unsupported Adobe Acrobat Pro version must not be installed.

Vulnerability discussion

Failure to install the most current Adobe Acrobat Pro version leaves a system vulnerable to exploitation. Current versions correct known security and system vulnerabilities. If the Adobe Acrobat Pro installation is not at the most current version and patch level, this is a Category 1 finding since new vulnerabilities will not be patched.Adobe Acrobat Pro XI is End of Life. Reference the following URL: http://www.adobe.com/support/products/enterprise/eol/. Click on "Adobe enterprise products and technical support periods".

Check content

For Windows systems: Select Settings >> System >> Apps and Features For UNIX/Linux systems: Utilize the relevant UNIX/Linux OS commands to identify installed software. If Adobe Acrobat XI Pro is installed, review security plan documentation for risk acceptance of temporary operation while Acrobat XI Pro is in the process of being replaced or upgraded. If Adobe Acrobat XI Pro is installed on the system with no documented risk acceptance, or if high-risk vulnerabilities associated with Acrobat XI Pro become known or publicized, this is a finding.

Fix text

Upgrade to latest version of Adobe Acrobat or uninstall software.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer