PT-2015-1227

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment,...

PT-2015-1230

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment, there is no...

PT-2015-1232

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access...

PT-2015-1231

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Reader affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules...

PT-2015-1223

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access...

Adobe Acrobat Reader app.Monitors().select nonDocument Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2015-1222

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules...

Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8451)

An Information Disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an improper implementation of a Javascript API. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

Adobe Acrobat Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

Adobe Reader Multiple Vulnerabilities-01 (Dec 2014) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2014-8448

An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8451...

Code injection

An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8451...

Code injection

An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8448...

CVE-2014-8451

An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8448...

CVE-2014-8448

CVE-2014-8448 is an information-disclosure vulnerability in Adobe Reader/Acrobat JavaScript API affecting the 10.x line (before 10.1.13) and the 11.x line (before 11.0.10) on Windows and macOS. Connected advisories cite APSB14-28 and describe exploitation via specially crafted PDF files that enti...

PT-2014-8532

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x before 10.1.13 Adobe Reader and Acrobat versions 11.x before 11.0.10 Description An unspecified JavaScript API issue allows attackers to obtain sensitive information via unknown vectors. Recommendations F...

PT-2014-8530

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x before 10.1.13 Adobe Reader and Acrobat versions 11.x before 11.0.10 Description An unspecified JavaScript API issue allows attackers to obtain sensitive information via unknown vectors. Recommendations F...

Adobe Acrobat < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28) (Mac OS X)

The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.13 / 11.0.10. It is, therefore, affected by the following vulnerabilities : - Memory corruption errors exist that allow arbitrary code execution. CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456,...

Adobe Reader < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28) (Mac OS X)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.13 / 11.0.10. It is, therefore, affected by the following vulnerabilities : - Memory corruption errors exist that allow arbitrary code execution. CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456,...