CVE-2014-0514

Exploit

EPSS 90.29%
Veröffentlicht 15.04.2014 23:13:14
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@adobe.com
CVE-Watchlists
Login
Unerledigt
Login

The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Adobe Reader SwPlatformandroid Version <= 11.1.3

Adobe ≫ Adobe Reader Version11.1.0 SwPlatformandroid

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	90.29%	0.995

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://helpx.adobe.com/security/products/reader-mobile/apsb14-12.html

Patch

Vendor Advisory

http://packetstormsecurity.com/files/127113/Adobe-Reader-for-Android-addJavascriptInterface-Exploit.html

http://seclists.org/fulldisclosure/2014/Apr/192

Exploit

http://www.exploit-db.com/exploits/32884

http://www.exploit-db.com/exploits/33791

http://www.osvdb.org/105781

http://www.securify.nl/advisory/SFY20140401/adobe_reader_for_android_exposes_insecure_javascript_interfaces.html

Exploit

http://www.securityfocus.com/archive/1/531831/100/0/threaded

http://www.securityfocus.com/bid/66798

https://nvd.nist.gov/vuln/detail/CVE-2014-0514

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0514

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0514

EUVD