Page 3 of 671 results (0.011 seconds)

CVSS: 10.0EPSS: 17%CPEs: 8EXPL: 0

27 Feb 2018 — Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explo... • https://helpx.adobe.com/security/products/acrobat/apsb17-36.html • CWE-125: Out-of-bounds Read •

CVSS: 10.0EPSS: 17%CPEs: 10EXPL: 0

27 Feb 2018 — Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explo... • https://helpx.adobe.com/security/products/acrobat/apsb17-36.html • CWE-125: Out-of-bounds Read •

CVSS: 10.0EPSS: 17%CPEs: 8EXPL: 0

10 Jan 2018 — Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. Adobe Acrobat y Reader, en versiones 2017.012.20098 y anteriores, 2017.011.30066 y anteriores, 2015.006.30355 y anteriores y 11.0.22 y anteriores, tienen una vulnerabilidad explotable de lectura fuera de límites. Su explo... • https://helpx.adobe.com/security/products/acrobat/apsb17-36.html • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 18%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupted cmap table input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as obj... • http://www.securityfocus.com/bid/101824 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 4%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitatio... • http://www.securityfocus.com/bid/101818 • CWE-416: Use After Free •

CVSS: 9.3EPSS: 6%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS conversion module, when handling a JPEG resource. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerab... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 4%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the MakeAccessible plugin, when creating an internal data structure. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an infor... • http://www.securityfocus.com/bid/101818 • CWE-416: Use After Free •

CVSS: 9.3EPSS: 8%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion vulnerability in the EMF processing module. The issue causes the program to access an object using an incompatible type, leading to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, ... • http://www.securityfocus.com/bid/101815 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 8%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of an out of bounds read vulnerability in the MakeAccesible plugin, when handling font data. It causes an out of bounds memory access, which sometimes triggers an access violation exception. Attackers can exploit the vulnerability by using the out of bounds access for unintended ... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 11%CPEs: 8EXPL: 0

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is a part of the functionality that handles font encodings. The vulnerability is a result of out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker... • http://www.securityfocus.com/bid/101812 • CWE-787: Out-of-bounds Write •