JavaScript API Execution Bypass in Adobe Reader and Acrobat
CVE-2015-3066

Currently unrated

Key Information:

Vendor
Adobe
Status
Acrobat
Mac Os X
Windows
Vendor
CVE Published:
13 May 2015

Summary

Adobe Reader and Acrobat on Windows and OS X prior to specified versions are susceptible to a vulnerability that allows unauthorized bypassing of restrictions on JavaScript API execution. Attackers may exploit this flaw through various unspecified vectors, which could lead to unintended actions and potentially harmful outcomes for users. This vulnerability poses a security risk that requires urgent attention to mitigate potential threats.

References

http://www.securityfocus.com/bid/74604
vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-15-200
x_refsource_MISC
https://helpx.adobe.com/security/products/reader/apsb15-1...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.