Lucene search
HistorySep 17, 2014 - 10:55 a.m.
CVE-2014-0568
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.013
Percentile
85.9%
The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
Affected configurations
Node
adobeacrobat_readerMatch10.0
ORadobeacrobat_readerMatch10.0.1
ORadobeacrobat_readerMatch10.0.2
ORadobeacrobat_readerMatch10.0.3
ORadobeacrobat_readerMatch10.1
ORadobeacrobat_readerMatch10.1.1
ORadobeacrobat_readerMatch10.1.2
ORadobeacrobat_readerMatch10.1.3
ORadobeacrobat_readerMatch10.1.4
ORadobeacrobat_readerMatch10.1.5
ORadobeacrobat_readerMatch10.1.6
ORadobeacrobat_readerMatch10.1.7
ORadobeacrobat_readerMatch10.1.8
ORadobeacrobat_readerMatch10.1.9
ORadobeacrobat_readerMatch10.1.10
ORadobeacrobat_readerMatch10.1.11
ORadobeacrobat_readerMatch11.0
ORadobeacrobat_readerMatch11.0.1
ORadobeacrobat_readerMatch11.0.2
ORadobeacrobat_readerMatch11.0.3
ORadobeacrobat_readerMatch11.0.4
ORadobeacrobat_readerMatch11.0.5-windows
ORadobeacrobat_readerMatch11.0.6
ORadobeacrobat_readerMatch11.0.7
ORadobeacrobat_readerMatch11.0.8
microsoftwindows
Node
adobeacrobatMatch10.0
ORadobeacrobatMatch10.0-pro
ORadobeacrobatMatch10.0.1
ORadobeacrobatMatch10.0.1-pro
ORadobeacrobatMatch10.0.2
ORadobeacrobatMatch10.0.3
ORadobeacrobatMatch10.1
ORadobeacrobatMatch10.1.1
ORadobeacrobatMatch10.1.2
ORadobeacrobatMatch10.1.3
ORadobeacrobatMatch10.1.4
ORadobeacrobatMatch10.1.5
ORadobeacrobatMatch10.1.6
ORadobeacrobatMatch10.1.7
ORadobeacrobatMatch10.1.8
ORadobeacrobatMatch10.1.9
ORadobeacrobatMatch10.1.10
ORadobeacrobatMatch10.1.11
ORadobeacrobatMatch11.0
ORadobeacrobatMatch11.0.1
ORadobeacrobatMatch11.0.2
ORadobeacrobatMatch11.0.3
ORadobeacrobatMatch11.0.4
ORadobeacrobatMatch11.0.5-windows
ORadobeacrobatMatch11.0.6
ORadobeacrobatMatch11.0.7
ORadobeacrobatMatch11.0.8
microsoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | acrobat_reader | 10.0 | cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.1 | cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.2 | cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.3 | cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1 | cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.1 | cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.2 | cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.3 | cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.4 | cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.5 | cpe:2.3:a:adobe:acrobat_reader:10.1.5:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Sandbox Bypass (APSB14-20; CVE-2014-0568)
2014-09-21 00:00:00
prion
prion
Design/Logic Flaw
2014-09-17 10:55:00
Race condition
2014-11-30 02:59:00
cve
cve
CVE-2014-0568
2014-09-17 10:55:06
CVE-2014-9150
2014-11-30 02:59:00
ubuntucve
ubuntucve
CVE-2014-0568
2014-09-17 00:00:00
cvelist
cvelist
CVE-2014-0568
2014-09-17 10:00:00
CVE-2014-9150
2014-11-30 02:00:00
nvd
nvd
CVE-2014-9150
2014-11-30 02:59:00
googleprojectzero
googleprojectzero
Windows 10^H^H Symbolic Link Mitigations
2015-08-25 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities-01 (Sep 2014) - Windows
2014-09-19 00:00:00
Adobe Acrobat Multiple Vulnerabilities-01 (Sep 2014) - Windows
2014-09-19 00:00:00
Adobe Acrobat Multiple Vulnerabilities-01 (Sep 2014) - Mac OS X
2014-09-19 00:00:00
nessus
nessus
Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)
2014-09-16 00:00:00
Adobe Reader < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)
2014-09-16 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.013
Percentile
85.9%
Related for NVD:CVE-2014-0568