Adobe Acrobat Pro DC Color Object Address Disclosure Vulnerability

🗓️ 13 Oct 2015 00:00:00Reported by AbdulAziz Hariri - HP Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 31 Views

Adobe Acrobat Pro DC Color Object Address Disclosure Vulnerability allows remote attackers to gain memory layout information. User interaction required to exploit via visiting a malicious page or opening a file. Specific flaw in how color objects in light objects are implemented, allowing disclosure of heap address. Attacker can use this information with other vulnerabilities to execute code

Reporter	Title	Published	Views	Family All 25
Tenable Nessus	Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Reader <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24) (Mac OS X)	15 Oct 201500:00	–	nessus
Tenable Nessus	Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24) (macOS)	21 Nov 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24) (macOS)	21 Oct 202400:00	–	nessus
BDU FSTEC	The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.	30 Oct 201500:00	–	bdu_fstec
CNVD	Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06749)	15 Oct 201500:00	–	cnvd
CVE	CVE-2015-6697	14 Oct 201523:00	–	cve
Cvelist	CVE-2015-6697	14 Oct 201523:00	–	cvelist