Lucene search
HistoryMay 14, 2014 - 11:13 a.m.
CVE-2014-0525
cve-2014-0525
adobe reader
acrobat
api
windows
os x
arbitrary code execution
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.5%
The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls.
Affected configurations
Node
adobeacrobat_readerMatch10.0
ORadobeacrobat_readerMatch10.0.1
ORadobeacrobat_readerMatch10.0.2
ORadobeacrobat_readerMatch10.0.3
ORadobeacrobat_readerMatch10.1
ORadobeacrobat_readerMatch10.1.1
ORadobeacrobat_readerMatch10.1.2
ORadobeacrobat_readerMatch10.1.3
ORadobeacrobat_readerMatch10.1.4
ORadobeacrobat_readerMatch10.1.5
ORadobeacrobat_readerMatch10.1.6
ORadobeacrobat_readerMatch10.1.7
ORadobeacrobat_readerMatch10.1.8
ORadobeacrobat_readerMatch10.1.9
ORadobeacrobat_readerMatch11.0
ORadobeacrobat_readerMatch11.0.1
ORadobeacrobat_readerMatch11.0.2
ORadobeacrobat_readerMatch11.0.3
ORadobeacrobat_readerMatch11.0.4
ORadobeacrobat_readerMatch11.0.5-windows
ORadobeacrobat_readerMatch11.0.6
applemac_os_x
ORmicrosoftwindows
Node
adobeacrobatMatch10.0
ORadobeacrobatMatch10.0.1
ORadobeacrobatMatch10.0.2
ORadobeacrobatMatch10.0.3
ORadobeacrobatMatch10.1
ORadobeacrobatMatch10.1.1
ORadobeacrobatMatch10.1.2
ORadobeacrobatMatch10.1.3
ORadobeacrobatMatch10.1.4
ORadobeacrobatMatch10.1.5
ORadobeacrobatMatch10.1.6
ORadobeacrobatMatch10.1.7
ORadobeacrobatMatch10.1.8
ORadobeacrobatMatch10.1.9
ORadobeacrobatMatch11.0
ORadobeacrobatMatch11.0.1
ORadobeacrobatMatch11.0.2
ORadobeacrobatMatch11.0.3
ORadobeacrobatMatch11.0.4
ORadobeacrobatMatch11.0.5-windows
ORadobeacrobatMatch11.0.6
applemac_os_x
ORmicrosoftwindows
Related
prion
prion
Code injection
2014-05-14 11:13:00
cvelist
cvelist
CVE-2014-0525
2014-05-14 10:00:00
nvd
nvd
CVE-2014-0525
2014-05-14 11:13:05
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)
2014-05-27 00:00:00
ubuntucve
ubuntucve
CVE-2014-0525
2014-05-14 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities - 01 (May 2014) - Windows
2014-05-22 00:00:00
Adobe Reader Multiple Vulnerabilities - 01 (May 2014) - Mac OS X
2014-05-22 00:00:00
Adobe Acrobat Multiple Vulnerabilities - 01 (May 2014) - Windows
2014-05-22 00:00:00
nessus
nessus
kaspersky
kaspersky
KLA10004 Multiple Adobe Acrobat & Reader vulnerabilities
2014-05-13 00:00:00
securityvulns
securityvulns
Adobe Reader / Acrobat multiple security vulnerabilities
2014-06-09 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.5%
Related for CVE-2014-0525