Adobe Reader and Acrobat Use-After-Free Remote Code Execution Vulnerability (CVE-2014-0496) Technical Advisory

# PowerShell script to silently apply the Adobe Reader MSP patch
$patchPath = 'C:\Patches\AcroReadUpd11006.msp'
if (Test-Path $patchPath) {
    Write-Host 'Applying Adobe Reader 11.0.06 Security Update...'
    Start-Process -FilePath 'msiexec.exe' -ArgumentList "/p `"$patchPath`" /qn /norestart" -Wait
    Write-Host 'Patch deployment completed.'
} else {
    Write-Error 'Patch file not found. Please download the MSP file from Adobe official repository.'
}

Windows Registry Editor Version 5.00

; Force Enable Protected Mode in Adobe Reader 11.0
[HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Privileged]
'bProtectedMode'=dword:00000001

; Enable Protected View for all files from untrusted locations
[HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\TrustManager]
'iProtectedView'=dword:00000002

# Audit script to detect vulnerable Adobe Reader/Acrobat versions
$uninstallKeys = @(
    'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*',
    'HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*'
)

Get-ItemProperty -Path $uninstallKeys -ErrorAction SilentlyContinue | 
    Where-Object { $_.DisplayName -like '*Adobe Reader*' -or $_.DisplayName -like '*Adobe Acrobat*' } | 
    Select-Object DisplayName, DisplayVersion | 
    ForEach-Object {
        $ver = $_.DisplayVersion
        if (($ver -like '10.*' -and [version]$ver -lt [version]'10.1.9') -or 
            ($ver -like '11.*' -and [version]$ver -lt [version]'11.0.06')) {
            Write-Host "[VULNERABLE] Found: $($_.DisplayName) (Version: $ver)" -ForegroundColor Red
        } else {
            Write-Host "[SECURE] Found: $($_.DisplayName) (Version: $ver)" -ForegroundColor Green
        }
    }