JavaScript API Execution Bypass in Adobe Reader and Acrobat
CVE-2015-3064

Currently unrated

Key Information:

Vendor
Adobe
Status
Acrobat
Mac Os X
Windows
Vendor
CVE Published:
13 May 2015

Summary

The vulnerability in Adobe Reader and Acrobat versions prior to 10.1.14 and 11.0.11 for Windows and OS X permits attackers to circumvent established restrictions on JavaScript API execution. This issue arises from unspecified vectors, which could enable unauthorized code execution and subsequent malicious activities, potentially compromising the user's system security. Organizations utilizing these software versions are advised to update promptly to mitigate the risk.

References

http://www.securityfocus.com/bid/74604
vdb-entryx_refsource_BID
https://helpx.adobe.com/security/products/reader/apsb15-1...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1032284
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.