CVE-2014-8459

2014-12-1021:59:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2014-8459

adobe reader

acrobat

windows

os x

memory corruption

arbitrary code

denial of service

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.84 High

EPSS

Percentile

98.4%

JSON

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158.

CPENameOperatorVersion
adobe:acrobatadobe acrobateq10.0
adobe:acrobatadobe acrobateq10.0.1
adobe:acrobatadobe acrobateq10.0.2
adobe:acrobatadobe acrobateq10.0.3
adobe:acrobatadobe acrobateq10.1
adobe:acrobatadobe acrobateq10.1.1
adobe:acrobatadobe acrobateq10.1.2
adobe:acrobatadobe acrobateq10.1.3
adobe:acrobatadobe acrobateq10.1.4
adobe:acrobatadobe acrobateq10.1.5

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	10.0
adobe:acrobat	adobe acrobat	eq	10.0.1
adobe:acrobat	adobe acrobat	eq	10.0.2
adobe:acrobat	adobe acrobat	eq	10.0.3
adobe:acrobat	adobe acrobat	eq	10.1
adobe:acrobat	adobe acrobat	eq	10.1.1
adobe:acrobat	adobe acrobat	eq	10.1.2
adobe:acrobat	adobe acrobat	eq	10.1.3
adobe:acrobat	adobe acrobat	eq	10.1.4
adobe:acrobat	adobe acrobat	eq	10.1.5