CVE-2015-3059

2015-05-1310:59:00

CWE-416

[email protected]

web.nvd.nist.gov

cve-2015-3059

adobe reader

acrobat

use-after-free vulnerability

arbitrary code execution

windows

os x

7.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

89.8%

JSON

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3053, CVE-2015-3054, CVE-2015-3055, and CVE-2015-3075.

CPENameOperatorVersion
adobe:acrobatadobe acrobateq10.1.0
adobe:acrobatadobe acrobateq10.1.1
adobe:acrobatadobe acrobateq10.1.2
adobe:acrobatadobe acrobateq10.1.3
adobe:acrobatadobe acrobateq10.1.4
adobe:acrobatadobe acrobateq10.1.5
adobe:acrobatadobe acrobateq10.1.6
adobe:acrobatadobe acrobateq10.1.7
adobe:acrobatadobe acrobateq10.1.8
adobe:acrobatadobe acrobateq10.1.9

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	10.1.0
adobe:acrobat	adobe acrobat	eq	10.1.1
adobe:acrobat	adobe acrobat	eq	10.1.2
adobe:acrobat	adobe acrobat	eq	10.1.3
adobe:acrobat	adobe acrobat	eq	10.1.4
adobe:acrobat	adobe acrobat	eq	10.1.5
adobe:acrobat	adobe acrobat	eq	10.1.6
adobe:acrobat	adobe acrobat	eq	10.1.7
adobe:acrobat	adobe acrobat	eq	10.1.8
adobe:acrobat	adobe acrobat	eq	10.1.9