Adobe’s monthly patch update for April includes an advisory addressing 16 security issues in Acrobat and Acrobat Reader, 14 of which are critical. Successful exploitation of these vulnerabilities could lead to arbitrary code execution, privilege escalation, security feature bypass, and memory leak. You can find more details regarding these security fixes, as well as the other issues disclosed by Adobe this month in our Adobe Vulnerability blog post. There are also updates available for Adobe Digital Editions, InCopy, 3D Stager, 3D Designer, and Dimension.
The report below will provide you with a list of Adobe Acrobat (Reader) installations for Windows that still need to be updated. It will also show you the minimum version required to be safe against the addressed security issues. To ensure your network and organization are fully safe against any possible attacks, it is recommended you update these assets as soon as possible.
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
Case
When tblSoftwareUni.softwareName Like '%Acrobat%DC%' Then '23.001.20143'
When tblSoftwareUni.softwareName Like '%Acrobat%2020%' Then '20.005.30467'
End As [Fixed Version],
tblSoftwareUni.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where ((tblSoftwareUni.softwareName Like '%Acrobat%DC%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) < 23) Or
(tblSoftwareUni.softwareName Like '%Acrobat%DC%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 22 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) < 001)
Or (tblSoftwareUni.softwareName Like '%Acrobat%DC%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 23 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) = 001 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) <= 20143) Or
(tblSoftwareUni.softwareName Like '%Acrobat%2020%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) < 20) Or
(tblSoftwareUni.softwareName Like '%Acrobat%2020%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 20 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) < 005)
Or (tblSoftwareUni.softwareName Like '%Acrobat%2020%' And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 20 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) = 005 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) <= 30467))
