Korean
<< Back
VID 28269
Severity 40
Port 139,445
Protocol TCP
Class SMB
Detailed Description The host has a version of Adobe Download Manager earlier than 1.6.2.63 installed. Such versions are potentially affected by a vulnerability that allows an attacker to download and install unauthorized software onto a user's system.

* Note: This check requires an account with administrative privileges which can log into the host to scan. Absence of these condition will result in the check not being performed and a False Negative for all vulnerable hosts.

* References:
http://www.adobe.com/support/security/bulletins/apsb10-08.html
http://blogs.adobe.com/psirt/2010/02/security_update_released_for_t.html
http://www.securityfocus.com/archive/1/509720/30/0/threaded

* Platforms Affected:
Adobe Download Manager versions prior to 2.1.x
Adobe getPlus versions prior to 1.6.2.63
Recommendation Uninstall the application
Related URL CVE-2010-0189 (CVE)
Related URL 38313 (SecurityFocus)
Related URL (ISS)