PT-2015-2370 · Adobe · Reader+1

Abdulaziz Hariri + 1 · Publicado 2015-10-13 · Atualizado 2021-09-08 · CVE-2015-6702

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions (affected versions not specified) Adobe Reader versions (affected versions not specified)

Description The issue is related to a function called createSquareMesh in Adobe's PDF editing and viewing software, which has inadequate access control mechanisms. This can be exploited by a remote attacker to access protected information in the process memory by providing invalid arguments. A memory-leak issue in Adobe Acrobat and Reader allows attackers to affect the system.

Recommendations For Adobe Acrobat, update to a version that addresses the createSquareMesh function issue. For Adobe Reader, consider disabling the createSquareMesh function as a temporary workaround until a patch is available. Restrict access to sensitive information in PDF files to minimize the risk of exploitation.

Correção

Information Disclosure

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-200

CWE-772

Identificadores relacionados

BDU:2015-11735

CVE-2015-6702

ZDI-15-480

Produtos afetados

Acrobat

Reader

Referências · 7

• http://zerodayinitiative.com/advisories/ZDI-15-480 · Nota
• http://securitytracker.com/id/1033796 · Nota
• https://bdu.fstec.ru/vul/2015-11735 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6702 · Nota
• https://helpx.adobe.com/security/products/acrobat/apsb15-24.html · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-15-480 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-6702 · Nota de Segurança