CVE-2014-0514

Exploit

EPSS 90.29%
Published 15.04.2014 23:13:14
Last modified 12.04.2025 10:46:40
Source psirt@adobe.com
Teams watchlist Login
Open Login

The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Adobe ≫ Adobe Reader SwPlatformandroid Version <= 11.1.3

Adobe ≫ Adobe Reader Version11.1.0 SwPlatformandroid

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	90.29%	0.995

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://helpx.adobe.com/security/products/reader-mobile/apsb14-12.html

Patch

Vendor Advisory

http://packetstormsecurity.com/files/127113/Adobe-Reader-for-Android-addJavascriptInterface-Exploit.html

http://seclists.org/fulldisclosure/2014/Apr/192

Exploit

http://www.exploit-db.com/exploits/32884

http://www.exploit-db.com/exploits/33791

http://www.osvdb.org/105781

http://www.securify.nl/advisory/SFY20140401/adobe_reader_for_android_exposes_insecure_javascript_interfaces.html

Exploit

http://www.securityfocus.com/archive/1/531831/100/0/threaded

http://www.securityfocus.com/bid/66798

https://nvd.nist.gov/vuln/detail/CVE-2014-0514

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0514

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0514

EUVD