Lucene search

[email protected]CVE-2015-6690

HistoryOct 14, 2015 - 11:59 p.m.

CVE-2015-6690

2015-10-1423:59:12

CWE-416

[email protected]

web.nvd.nist.gov

cve-2015-6690

adobe reader

acrobat

use-after-free

vulnerability

arbitrary code execution

crafted arguments

windows

os x

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

JSON

Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Affected configurations

NVD

Node

adobeacrobatRange10.0–10.1.15

adobeacrobatRange11.0.0–11.0.12

adobeacrobat_dcRange15.006.30060–15.006.30094classic

adobeacrobat_dcRange15.008.20082–15.009.20069continuous

adobeacrobat_readerRange10.0–10.1.15

adobeacrobat_readerRange11.0.0–11.0.12

adobeacrobat_reader_dcRange15.006.30060–15.006.30094classic

adobeacrobat_reader_dcRange15.008.20082–15.009.20069continuous

AND

applemacosMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
adobe:acrobatadobe acrobatle10.1.15
adobe:acrobatadobe acrobatle11.0.12
adobe:acrobat_dcadobe acrobat dclt15.006.30094
adobe:acrobat_dcadobe acrobat dclt15.009.20069
adobe:acrobat_readeradobe acrobat readerle10.1.15
adobe:acrobat_readeradobe acrobat readerle11.0.12
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30094
adobe:acrobat_reader_dcadobe acrobat reader dclt15.009.20069

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	10.1.15
adobe:acrobat	adobe acrobat	le	11.0.12
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30094
adobe:acrobat_dc	adobe acrobat dc	lt	15.009.20069
adobe:acrobat_reader	adobe acrobat reader	le	10.1.15
adobe:acrobat_reader	adobe acrobat reader	le	11.0.12
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30094
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.009.20069