CVE-2014-0525

CVE-2014-0525 : Adobe Reader and Acrobat (Windows/macOS) are affected. The flaw is in the API handling unmapped memory in versions 10.x prior to 10.1.10 and 11.x prior to 11.0.07, enabling arbitrary code execution via unspecified API calls. The issue is documented by Adobe in APSB14-15; remediati...

CVE-2014-0528

CVE-2014-0528 is a memory corruption issue in Adobe Reader and Acrobat on Windows and macOS caused by a double-free vulnerability when parsing PDFs. The flaw allows remote code execution if a user opens a malicious PDF, as described by the related APSB14-15 advisory. Affected products include Ado...

CVE-2014-0525

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls...

CVE-2014-0524

CVE-2014-0524 affects Adobe Reader and Acrobat 10.x (before 10.1.10) and 11.x (before 11.0.07) on Windows and macOS . The root cause is incorrect memory buffer allocation while parsing a corrupted PDF file , leading to arbitrary code execution or memory corruption (DoS) . Patches are available; u...

CVE-2014-0528: Undefined Security Weakness

Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors...

CVE-2014-0525: Undefined Security Weakness

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls...

CVE-2014-0524: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0522, CVE-2014-0523, and CVE-2014-0526...

Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 / 11.0.07. It is, therefore, affected by multiple vulnerabilities : - A heap overflow vulnerability exists that could lead to code execution. CVE-2014-0511 - A security bypass vulnerability exists with input...

CVE-2014-0521: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote attackers to obtain sensitive information via a crafted PDF document...

CVE-2014-0529: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors...

CVE-2014-0526: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0522, CVE-2014-0523, and CVE-2014-0524...

CVE-2014-0527: Undefined Security Weakness

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors...

CVE-2014-0522: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0523, CVE-2014-0524, and CVE-2014-0526...

CVE-2014-0523: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0522, CVE-2014-0524, and CVE-2014-0526...

Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15) (Mac OS X)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 or 11.0.07. It is, therefore, affected by multiple vulnerabilities : - A heap overflow condition exists that allows an attacker to execute arbitrary code. CVE-2014-0511 - A security bypass vulnerability exists...

PT-2014-1397

Name of the Vulnerable Software and Affected Versions Adobe Acrobat affected versions not specified Adobe Reader affected versions not specified Description The issue allows attackers to execute arbitrary code or cause a denial of service memory error. Recommendations At the moment, there is no...

PT-2014-1383

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x through 10.1.9 Adobe Reader and Acrobat versions 11.x through 11.0.06 Description The issue is related to a double free vulnerability that allows attackers to execute arbitrary code via unspecified vector...

PT-2014-1385

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x before 10.1.10 Adobe Reader and Acrobat versions 11.x before 11.0.07 Description The issue allows attackers to execute arbitrary code via unspecified vectors. This is due to a use-after-free vulnerability...

PT-2014-1387

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 10.x through 10.1.9 Adobe Reader versions 11.x through 11.0.06 Adobe Acrobat versions 10.x through 10.1.9 Adobe Acrobat versions 11.x through 11.0.06 Description The issue allows attackers to execute arbitrary code via...

PT-2014-1396

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Acrobat affected versions not specified Description The issue allows attackers to execute arbitrary code or cause a denial of service memory error. Recommendations At the moment, there is no...