Lucene search

[email protected]CVE-2015-4438

HistoryJul 15, 2015 - 2:59 p.m.

CVE-2015-4438

2015-07-1514:59:05

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

cve-2015-4438

security

vulnerability

bypass

javascript

api

execution

restrictions

windows

os x

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Affected configurations

NVD

Node

adobeacrobatRange10.0–10.1.15

adobeacrobatRange11.0.0–11.0.12

adobeacrobat_dcRange15.006.30033–15.006.30060classic

adobeacrobat_dcRange15.007.20033–15.008.20082continuous

adobeacrobat_readerRange10.0–10.1.15

adobeacrobat_readerRange11.0.0–11.0.12

adobeacrobat_reader_dcRange15.006.30033–15.006.30060classic

adobeacrobat_reader_dcRange15.007.20033–15.008.20082continuous

AND

applemacosMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
adobe:acrobatadobe acrobatlt10.1.15
adobe:acrobatadobe acrobatlt11.0.12
adobe:acrobat_dcadobe acrobat dclt15.006.30060
adobe:acrobat_dcadobe acrobat dclt15.008.20082
adobe:acrobat_readeradobe acrobat readerlt10.1.15
adobe:acrobat_readeradobe acrobat readerlt11.0.12
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30060
adobe:acrobat_reader_dcadobe acrobat reader dclt15.008.20082

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	lt	10.1.15
adobe:acrobat	adobe acrobat	lt	11.0.12
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30060
adobe:acrobat_dc	adobe acrobat dc	lt	15.008.20082
adobe:acrobat_reader	adobe acrobat reader	lt	10.1.15
adobe:acrobat_reader	adobe acrobat reader	lt	11.0.12
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30060
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.008.20082