Adobe Acrobat And Reader JavaScript API Code Execution (APSB15-15: CVE-2015-4452)

A Restrictions Bypass Privileged JavaScript API Execution Vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified...

CVE-2015-4452

CVE-2015-4452 affectsAdobe Reader and Acrobat 10.x (pre-10.1.15) and 11.x (pre-11.0.12), plus Acrobat/Reader DC Classic pre-2015.006.30060 and DC Continuous pre-2015.008.20082 on Windows and macOS. The issue is a bypass of JavaScript API execution restrictions, exploitable via unspecified vectors...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...