CVSS: 5.0EPSS: 0%CPEs: 10EXPL: 0CVE-2015-4450
https://notcve.org/view.php?id=CVE-2015-4450
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2014-8450, CVE-2015-4449, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092. Adobe Reader y Acrobat 10.x anterior a 10.1.15 y 11.x anterior a 11.0.12, Acrobat y Acrobat Reader DC Classic anterior a 2015.006.30060 y Acrobat y Acrobat Reader DC Continuous anterior a 2015.008.20082 en Windows y OS X permite a atacantes eludir las restricciones de acceso previstas y obtener informacion sensible a través de vectores no especificados, una vulnerabilidad diferente a CVE-2014-8450, CVE-2015-4449, CVE-2015-5088, CVE-2015-5089 y CVE-2015-5092. • http://www.securityfocus.com/bid/75742 http://www.securitytracker.com/id/1032892 https://helpx.adobe.com/security/products/reader/apsb15-15.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 5%CPEs: 10EXPL: 0CVE-2015-5106 – Adobe Reader Portfolio Preview Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2015-5106
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and perform a transition from Low Integrity to Medium Integrity via unspecified vectors, a different vulnerability than CVE-2015-4446 and CVE-2015-5090. Adobe Reader y Acrobat 10.x anterior a 10.1.15 y 11.x anterior a 11.0.12, Acrobat y Acrobat Reader DC Classic anterior a 2015.006.30060 y Acrobat y Acrobat Reader DC Continuous anterior a 2015.008.20082 en Windows y OS X permite a atacantes eludir las restricciones de acceso previstas y realizar una transición desde Baja Integridad a Media Integridad a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-4446 y CVE-2015-5090. This vulnerability allows attackers to elevate privileges on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw occurs within the handling of Portfolio documents. When previewing Portfolio documents, the broker process utilizes higher privileges than necessary. • http://www.securityfocus.com/bid/75743 http://www.securitytracker.com/id/1032892 http://www.zerodayinitiative.com/advisories/ZDI-15-370 https://helpx.adobe.com/security/products/reader/apsb15-15.html • CWE-269: Improper Privilege Management •
CVSS: 4.3EPSS: 2%CPEs: 10EXPL: 0CVE-2015-5107 – Adobe Reader makeMeasurement Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2015-5107
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to obtain sensitive information via unspecified vectors. Adobe Reader y Acrobat 10.x anterior a 10.1.15 y 11.x anterior a 11.0.12, Acrobat y Acrobat Reader DC Classic anterior a 2015.006.30060 y Acrobat y Acrobat Reader DC Continuous anterior a 2015.008.20082 en Windows y OS X permite a atacantes obtener informacion sensible a través de vectores no especificados. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arguments passed to the makeMeasurement method. A specially crafted argument to makeMeasurement will leave objects in an inconsistent state. • http://www.securitytracker.com/id/1032892 http://www.zerodayinitiative.com/advisories/ZDI-15-371 https://helpx.adobe.com/security/products/reader/apsb15-15.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 11%CPEs: 10EXPL: 0CVE-2015-5109 – Adobe Reader opendoc Broker Message Integer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2015-5109
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5097 and CVE-2015-5108. Desbordamiento de enteros en Adobe Reader y Acrobat 10.x anterior a 10.1.15 y 11.x anterior a 11.0.12, Acrobat y Acrobat Reader DC Classic anterior a 2015.006.30060 y Acrobat y Acrobat Reader DC Continuous anterior a 2015.008.20082 en Windows y OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-5097 y CVE-2015-5108. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of the opendoc message. A specially crafted opendoc message can cause an integer wrap of a size value passed to a malloc call, which is followed by a strncpy call. • http://www.securityfocus.com/bid/75741 http://www.securitytracker.com/id/1032892 http://www.zerodayinitiative.com/advisories/ZDI-15-369 https://helpx.adobe.com/security/products/reader/apsb15-15.html • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.8EPSS: 11%CPEs: 10EXPL: 0CVE-2015-5110 – Adobe Reader makeMeasurement Stack Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2015-5110
Stack-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors. Desbordamiento del buffer basado en pila en Adobe Reader y Acrobat 10.x anterior a 10.1.15 y 11.x anterior a 11.0.12, Acrobat y Acrobat Reader DC Classic anterior a 2015.006.30060 y Acrobat y Acrobat Reader DC Continuous anterior a 2015.008.20082 en Windows y OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arguments passed to the makeMeasurement method. A specially crafted argument passed to makeMeasurement can overflow a buffer of size 0x64 bytes. • http://www.securitytracker.com/id/1032892 http://www.zerodayinitiative.com/advisories/ZDI-15-368 https://helpx.adobe.com/security/products/reader/apsb15-15.html • CWE-787: Out-of-bounds Write •