Lucene search

K
cve[email protected]CVE-2015-5105
HistoryJul 15, 2015 - 2:59 p.m.

CVE-2015-5105

2015-07-1514:59:33
CWE-787
web.nvd.nist.gov
27
cve-2015-5105
adobe reader
acrobat
buffer overflow
security vulnerability
arbitrary code execution
windows
os x

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.09

Percentile

94.6%

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5096 and CVE-2015-5098.

Affected configurations

NVD
Node
adobeacrobatRange10.010.1.14
OR
adobeacrobatRange11.0.011.0.11
OR
adobeacrobat_dcRange15.006.3003315.006.30060classic
OR
adobeacrobat_dcRange15.007.2003315.008.20082continuous
OR
adobeacrobat_readerRange10.010.1.14
OR
adobeacrobat_readerRange11.0.011.0.11
OR
adobeacrobat_reader_dcRange15.006.3003315.006.30060classic
OR
adobeacrobat_reader_dcRange15.007.2003315.008.20082continuous
AND
applemacosMatch-
OR
microsoftwindowsMatch-
VendorProductVersionCPE
adobeacrobat_readercpe:/a:adobe:acrobat_reader::::
adobeacrobatcpe:/a:adobe:acrobat::::

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.09

Percentile

94.6%