Heap overflow

Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary...

CVE-2015-8458

CVE-2015-8458 is a heap-based buffer overflow in AGM.dll within Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus Acrobat/Reader DC Classic pre-2015.006.30094 and Continuous pre-2015.009.20069, on Windows and macOS. The vulnerability is triggered by a malicious multi-layer PDF ...

CVE-2015-8458: Out-of-bounds Write

Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary...

Adobe Reader DC AGM Remote Code Execution Vulnerability

Adobe Reader is a PDF document reading software.Acrobat is a PDF document editing software. Acrobat Reader DC in the implementation of AGM.dll security vulnerabilities, with multiple layers of the construction of the PDF will lead to a heap buffer overflow, an attacker can take advantage of this...

Adobe Reader DC AGM Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within AGM.dll. A...

PDF viewer programs Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat, Adobe Acrobat Document Cloud stem from buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code...

Adobe Reader DC AGM Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within AGM.dll. A...

KLA11273 Adobe Acrobat X and Adobe Reader X end of life

Adobe announced the end of support of Adobe Acrobat X and Adobe Reader X. Users should immediately make transition to Adobe Acrobat DC and Adobe Acrobat Reader DC. Original advisories Adobe Acrobat X and Adobe Reader X End of Support Related products Adobe-Reader-X Adobe-Acrobat-X CVE list Soluti...

Out-of-bounds

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service...

CVE-2015-7650

Technical details for CVE-2015-7650 are not publicly provided in the supplied documents. No affected product/version/root-cause/remediation is specified here; monitor official advisories for updates on this entry.

CVE-2015-7650: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service...

CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...

CVE-2005-1306

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

Adobe Acrobat Document Cloud PDF Memory Access

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers,...

PDF Editing JavaScript Bypass

The vulnerability in the implementations of Function calls for PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploitin...

PDF Editing Code Execution

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or...

Adobe Acrobat Document Cloud PDF Memory Access

The vulnerability of the loadFlashMovie function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this vulnerabilit...

PDF Editing JavaScript Bypass

The vulnerability of the ANStartApproval method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting this...

PDF Editing Code Execution

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to...