Multiple vulnerabilities in Adobe Acrobat & Reader

Описание

Multiple critical vulnerabilities have been found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information, execute arbitrary code and read arbitrary files.

Below is a complete list of vulnerabilities

1. use-after-free vulnerability can be exploited via unspecified vectors;
2. Unknown vectors can be exploited via XML external entity declaration;
3. Race conditions can be exploited via an NTFS junction;
4. Unknown vectors can be exploited via JavaScript API;
5. An integer overflow can be exploited via unspecified vectors;
6. Unlnown vectors can be exploited remotely;
7. Heap based buffer overflow can be exploited via unknown vectors.

Первичный источник обнаружения

• APSB
  

Связанные продукты

• Adobe-Reader
• Adobe-Acrobat
• Adobe-Reader-X
• Adobe-Acrobat-X
• Adobe-Reader-XI
• Adobe-Acrobat-XI

Список CVE

• CVE-2014-8445
  critical
• CVE-2014-9165
  critical
• CVE-2014-8452
  critical
• CVE-2014-8453
  critical
• CVE-2014-9150
  high
• CVE-2014-8446
  critical
• CVE-2014-8447
  critical
• CVE-2014-8448
  critical
• CVE-2014-8456
  critical
• CVE-2014-8454
  critical
• CVE-2014-8455
  critical
• CVE-2014-8451
  critical
• CVE-2014-8449
  critical
• CVE-2014-8457
  critical
• CVE-2014-8458
  critical
• CVE-2014-8460
  critical
• CVE-2014-8459
  critical
• CVE-2014-8461
  critical
• CVE-2014-9158
  critical
• CVE-2014-9159
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com