CVE-2015-3060: Improper Access Control

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065,...

PT-2015-1212

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Description The issue is related to a memory integrity violation. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. Recommendations At th...

CVE-2015-3059: Use After Free

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3053, CVE-2015-3054, CVE-2015-3055, and CVE-2015-3075...

CVE-2015-3057: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...

PT-2015-1209

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Description The issue is related to a memory integrity violation. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. Recommendations At th...

PT-2015-1228

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Description The issue is related to a memory integrity violation. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. Recommendations At th...

CVE-2015-3047: Undefined Security Weakness

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2015-3064: Improper Access Control

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3065,...

PT-2015-1233

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue is caused by the use of memory after it has been freed. This can allow a remote attacker to execute arbitrary code. Recommendation...

PT-2015-1208

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 10.x through 10.1.13 Adobe Reader versions 11.x through 11.0.10 Acrobat versions 10.x through 10.1.13 Acrobat versions 11.x through 11.0.10 Description The issue is related to a buffer overflow, which can be exploited by ...

PT-2015-1234

Name of the Vulnerable Software and Affected Versions Adobe Reader affected versions not specified Description The issue is related to a memory integrity violation. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. Recommendations At th...

Adobe Acrobat Reader indexOfNextEssential Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Reader ANMatchString Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ANMatchString...

Adobe Acrobat Reader DynamicAnnotStore enumerate Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Reader WDAnnotEnumerator Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within WDAnnotEnumerator...

Adobe Acrobat Reader AFParseDate Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within AFParseDate. By...

PT-2015-1213

Name of the Vulnerable Software and Affected Versions Adobe Acrobat affected versions not specified Adobe Reader affected versions not specified Description The issue is caused by a use-after-free error, which occurs when memory is accessed after it has been freed. This can allow a remote attacke...

PT-2015-1231

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Reader affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules...

PT-2015-1219

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Reader affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules...

PT-2015-6065

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x through 10.1.13 Adobe Reader and Acrobat versions 11.x through 11.0.10 Description The issue allows attackers to obtain sensitive information from process memory. Recommendations For Adobe Reader and...