PT-2015-1507 · Adobe · Reader+3

Publicado

2015-07-14

·

Atualizado

2021-09-08

·

CVE-2015-5114

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Acrobat (affected versions not specified) Adobe Reader (affected versions not specified) Adobe Acrobat DC (affected versions not specified) Adobe Reader DC (affected versions not specified)
Description The issue is related to a use-after-free vulnerability, which allows an attacker to execute arbitrary code remotely by exploiting the use of memory after it has been freed. This can lead to remote code execution.
Recommendations For Adobe Acrobat, update to a version that includes a fix for this issue. For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat DC, update to a version that includes a fix for this issue. For Adobe Reader DC, update to a version that includes a fix for this issue. As a temporary workaround, consider disabling the use of Calculate field actions in Adobe Acrobat Pro until a patch is available.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2015-10786
BDU:2015-10787
BDU:2015-10788
BDU:2015-10789
CVE-2015-5114
ZDI-15-324

Produtos afetados

Acrobat
Acrobat Dc
Reader
Reader Dc