CVE-2015-3071

2015-05-1311:00:00

CWE-284

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

cve-2015-3071

security

javascript

api

vulnerability

windows

os x

6.3 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.3%

JSON

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq10.1.0
adobe:acrobat_readeradobe acrobat readereq10.1.1
adobe:acrobat_readeradobe acrobat readereq10.1.2
adobe:acrobat_readeradobe acrobat readereq10.1.3
adobe:acrobat_readeradobe acrobat readereq10.1.4
adobe:acrobat_readeradobe acrobat readereq10.1.5
adobe:acrobat_readeradobe acrobat readereq10.1.6
adobe:acrobat_readeradobe acrobat readereq10.1.7
adobe:acrobat_readeradobe acrobat readereq10.1.8
adobe:acrobat_readeradobe acrobat readereq10.1.9

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.0
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.1
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.2
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.3
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.4
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.5
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.6
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.7
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.8
adobe:acrobat_reader	adobe acrobat reader	eq	10.1.9