Adobe Reader and Acrobat Sandbox Escape and Remote Code Execution Vulnerability (CVE-2014-0546)

# Trigger Adobe Acrobat Update Service to fetch and install the latest patches
if (Test-Path 'C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Adobearm.exe') {
    Write-Host 'Triggering Adobe Update Manager...'
    Start-Process 'C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Adobearm.exe' -ArgumentList '/searchnow' -Wait
    Write-Host 'Update process completed.'
} else {
    Write-Error 'Adobe Update Service executable not found. Please update manually.'
}

Windows Registry Editor Version 5.00

; Enforce Protected Mode and Enhanced Security for Adobe Reader 11.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown]
"bProtectedMode"=dword:00000001
"bEnhancedSecurityStandalone"=dword:00000001
"bEnhancedSecurityInBrowser"=dword:00000001

# Audit script to detect vulnerable Adobe Reader/Acrobat versions
$paths = @(
    'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*',
    'HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*'
)

Get-ItemProperty -Path $paths -ErrorAction SilentlyContinue | 
    Where-Object { $_.DisplayName -like '*Adobe Reader*' -or $_.DisplayName -like '*Adobe Acrobat*' } | 
    ForEach-Object {
        $name = $_.DisplayName
        $ver = $_.DisplayVersion
        if ($ver -like '10.*' -and [System.Version]$ver -lt [System.Version]'10.1.11') {
            Write-Host "[VULNERABLE] $name ($ver) detected. Upgrade to 10.1.11+ required." -ForegroundColor Red
        } elseif ($ver -like '11.*' -and [System.Version]$ver -lt [System.Version]'11.0.08') {
            Write-Host "[VULNERABLE] $name ($ver) detected. Upgrade to 11.0.08+ required." -ForegroundColor Red
        } else {
            Write-Host "[SECURE] $name ($ver) is patched or not affected." -ForegroundColor Green
        }
    }