Design/Logic Flaw

🗓️ 14 Oct 2015 23:59:00Reported by PRIOn knowledge baseType

ANAuthenticateResource method security vulnerability in Adobe Reader and Acrobat versions before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 allows attackers to bypass JavaScript API execution restrictions via unspecified vectors

Reporter	Title	Published	Views	Family All 210
Tenable Nessus	Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24) (macOS)	21 Nov 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24) (macOS)	21 Oct 202400:00	–	nessus
CNVD	Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06690)	15 Oct 201500:00	–	cnvd
CNVD	Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06691)	15 Oct 201500:00	–	cnvd
CNVD	Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06692)	15 Oct 201500:00	–	cnvd
CNVD	Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06693)	15 Oct 201500:00	–	cnvd

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb15-24.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-510
securitytracker	www.securitytracker.com/id/1033796