Lucene search
AbdulAziz Hariri and Jasiel Spelman - HP Zero Day InitiativeZDI-15-314HistoryJul 14, 2015 - 12:00 a.m.
Adobe Reader ARMSvc Elevation of Privilege Vulnerability
2015-07-1400:00:00
AbdulAziz Hariri and Jasiel Spelman - HP Zero Day Initiative
www.zerodayinitiative.com
92
0.002 Low
EPSS
Percentile
59.2%
This vulnerability allows local attackers to elevate privileges on vulnerable installations of Adobe Reader. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ARMSvc service. An attacker can force the service to overwrite the Adobe updater with any file signed by Adobe. An attacker can leverage this vulnerability to execute code under the context of SYSTEM.
Related
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Security Bypass (APSB15-15: CVE-2015-5090)
2015-08-23 00:00:00
nvd
nvd
prion
prion
Design/Logic Flaw
2015-07-15 14:59:00
Design/Logic Flaw
2015-07-15 14:59:00
Design/Logic Flaw
2015-07-15 14:59:00
cvelist
cvelist
cve
cve
nessus
nessus
kaspersky
kaspersky
KLA10628 Multiple vulnerabilities in Adobe Acrobat
2015-07-14 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities - 01 (Jul 2015) - Windows
2015-07-21 00:00:00
Adobe Acrobat Multiple Vulnerabilities - 01 (Jul 2015) - Windows
2015-07-21 00:00:00
Adobe Reader Multiple Vulnerabilities - 01 (Jul 2015) - Mac OS X
2015-07-21 00:00:00
securityvulns
securityvulns
Adobe Reader / Acrobat multiple security vulnerabilities
2015-07-19 00:00:00