CVE-2014-9161

2015-01-3011:59:00

CWE-119

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

vulnerability

cve-2014-9161

remote code execution

pdf

nvd

7.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

90.1%

JSON

CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq10.1.13
adobe:acrobat_readeradobe acrobat readereq11.0.10
adobe:acrobatadobe acrobateq10.0
adobe:acrobatadobe acrobateq10.0.1
adobe:acrobatadobe acrobateq10.0.2
adobe:acrobatadobe acrobateq10.0.3
adobe:acrobatadobe acrobateq10.1
adobe:acrobatadobe acrobateq10.1.1
adobe:acrobatadobe acrobateq10.1.2
adobe:acrobatadobe acrobateq10.1.3

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.13
adobe:acrobat_reader	adobe acrobat reader	eq	11.0.10
adobe:acrobat	adobe acrobat	eq	10.0
adobe:acrobat	adobe acrobat	eq	10.0.1
adobe:acrobat	adobe acrobat	eq	10.0.2
adobe:acrobat	adobe acrobat	eq	10.0.3
adobe:acrobat	adobe acrobat	eq	10.1
adobe:acrobat	adobe acrobat	eq	10.1.1
adobe:acrobat	adobe acrobat	eq	10.1.2
adobe:acrobat	adobe acrobat	eq	10.1.3