PT-2015-1491 · Adobe · Reader+3

Publicado

2015-07-14

·

Atualizado

2021-09-08

·

CVE-2015-5095

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Acrobat (affected versions not specified) Adobe Reader (affected versions not specified) Adobe Reader DC (affected versions not specified) Adobe Acrobat DC (affected versions not specified)
Description The issue is related to a use-after-free vulnerability, which allows an attacker to execute arbitrary code remotely by exploiting the vulnerability in memory usage after it has been freed. This can lead to remote code execution, allowing the attacker to perform malicious actions.
Recommendations For Adobe Acrobat, update to a version that includes a fix for this issue. For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Reader DC, update to a version that includes a fix for this issue. For Adobe Acrobat DC, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2015-10722
BDU:2015-10723
BDU:2015-10724
BDU:2015-10725
CVE-2015-5095
ZDI-15-322

Produtos afetados

Acrobat
Acrobat Dc
Reader
Reader Dc