Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

CVE-2014-8452

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-8452

CVE-2014-8452 is an XML External Entity (XXE) information-disclosure flaw in Adobe Reader/Acrobat. Connected sources confirm the issue affects Adobe Reader X/XI prior to 10.1.14/11.0.11, with the root cause being improper XML/ENTITY handling in the product’s XML parser. Public advisories (APSB15-...