Published: 13/05/2015 Updated: 03/01/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Reader and Acrobat 10.x prior to 10.1.14 and 11.x prior to 11.0.11 on Windows and OS X allow malicious users to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050, CVE-2015-3051, CVE-2015-3056, CVE-2015-3057, CVE-2015-3070, and CVE-2015-3076.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe acrobat 11.0.7
adobe acrobat 11.0.6
adobe acrobat 11.0.5
adobe acrobat 11.0.4
adobe acrobat 10.1.4
adobe acrobat 10.1.3
adobe acrobat 10.1.2
adobe acrobat 10.1.1
adobe acrobat 10.1.13
adobe acrobat 10.1.12
adobe acrobat 10.1.11
adobe acrobat 10.1.10
adobe acrobat 11.0.9
adobe acrobat 11.0.2
adobe acrobat 11.0.0
adobe acrobat 10.1.9
adobe acrobat 10.1.7
adobe acrobat 10.1.5
adobe acrobat 10.1.0
adobe acrobat 11.0.10
adobe acrobat 11.0.8
adobe acrobat 11.0.3
adobe acrobat 11.0.1
adobe acrobat 10.1.8
adobe acrobat 10.1.6
apple mac_os_x
microsoft windows
adobe acrobat_reader 11.0.4
adobe acrobat_reader 11.0.3
adobe acrobat_reader 11.0.2
adobe acrobat_reader 11.0.1
adobe acrobat_reader 10.1.1
adobe acrobat_reader 10.1.0
adobe acrobat_reader 11.0.10
adobe acrobat_reader 11.0.9
adobe acrobat_reader 10.1.9
adobe acrobat_reader 10.1.8
adobe acrobat_reader 10.1.7
adobe acrobat_reader 10.1.6
adobe acrobat_reader 11.0.7
adobe acrobat_reader 11.0.5
adobe acrobat_reader 11.0.0
adobe acrobat_reader 10.1.12
adobe acrobat_reader 10.1.10
adobe acrobat_reader 10.1.5
adobe acrobat_reader 10.1.3
adobe acrobat_reader 11.0.8
adobe acrobat_reader 11.0.6
adobe acrobat_reader 10.1.13
adobe acrobat_reader 10.1.11
adobe acrobat_reader 10.1.4
adobe acrobat_reader 10.1.2

Killer ChAraCter HOSES almost all versions of Reader, Windows

The Register • Darren Pauli • 24 Jun 2015

Google Project Zero bod drops 15 remote code execution holes

Get patching: Google Project Zero hacker Mateusz Jurczyk has dropped 15 remote code execution vulnerabilities, including a single devastating hack against Adobe Reader and Windows he reckons beats all exploit defences. The accomplished offensive security researcher (@j00ru) presented findings at the Recon security conference this month under the title One font vulnerability to rule them all: A story of cross-software ownage, shared codebases and advanced exploitation [PDF ] without much fanfare ...

CVE-2015-3052

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect