Multiple vulnerabilities in Adobe Acrobat and Reader

Beschreibung

Multiple serious vulnerabilities have been found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited via specially designed print job to obtain sensitive information;
2. Use-after-free vulnerability can be exploited to execute arbitrary code;
3. An unknown vulnerability can be exploited via Format action to cause denial of service;
4. Buffer overflow can be exploited to obtain sensitive information or execute arbitrary code;
5. An unknown vulnerability can be exploited via data reading to obtain sensitive information;
6. An unknown vulnerability related to JavaScript API can be exploited to bypass security restrictions.

---

Technical details

Vulnerability (1) can be triggered via launching print job on remote printer.

Vulnerability (3) can be triggered via using the Format action on unspecified fields.

Vulnerability (5) can be triggered via reading light object’s RGB data. This vulnerability leads to color objects information disclosure.

(6) related to ANSendForReview method.

Ursprüngliche Informationshinweise

• Adobe bulletin

CVE Liste

• CVE-2015-5583
  critical
• CVE-2015-6697
  critical
• CVE-2015-6687
  critical
• CVE-2015-5586
  critical
• CVE-2015-6686
  critical
• CVE-2015-6712
  critical
• CVE-2015-6719
  critical
• CVE-2015-6685
  critical
• CVE-2015-6684
  critical
• CVE-2015-7624
  critical
• CVE-2015-6698
  critical
• CVE-2015-6705
  critical
• CVE-2015-6704
  critical
• CVE-2015-6707
  critical
• CVE-2015-6706
  critical
• CVE-2015-6717
  critical
• CVE-2015-6708
  critical
• CVE-2015-6693
  critical
• CVE-2015-6714
  critical
• CVE-2015-6691
  critical
• CVE-2015-6690
  critical
• CVE-2015-6689
  critical
• CVE-2015-6688
  critical
• CVE-2015-7623
  critical
• CVE-2015-7622
  critical
• CVE-2015-6723
  critical
• CVE-2015-6722
  critical
• CVE-2015-6683
  critical
• CVE-2015-6715
  critical
• CVE-2015-6721
  critical
• CVE-2015-6695
  critical
• CVE-2015-6720
  critical
• CVE-2015-7619
  critical
• CVE-2015-6716
  critical
• CVE-2015-6718
  critical
• CVE-2015-6710
  critical
• CVE-2015-6709
  critical
• CVE-2015-6725
  critical
• CVE-2015-7616
  critical
• CVE-2015-7617
  critical
• CVE-2015-7618
  critical
• CVE-2015-6699
  critical
• CVE-2015-6724
  critical
• CVE-2015-6711
  critical
• CVE-2015-7614
  critical
• CVE-2015-7615
  critical
• CVE-2015-6696
  critical
• CVE-2015-6692
  critical
• CVE-2015-7620
  critical
• CVE-2015-7621
  critical
• CVE-2015-6702
  critical
• CVE-2015-6703
  critical
• CVE-2015-6700
  critical
• CVE-2015-6713
  critical
• CVE-2015-6694
  critical
• CVE-2015-6701
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com