10

CVE-2014-0546

Warnung

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version >= 10.0 < 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version >= 11.0 < 11.0.08
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version >= 10.0 < 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version >= 11.0 < 11.0.08
   Microsoft ≫ Windows

25.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Acrobat and Reader Sandbox Bypass Vulnerability

Schwachstelle

Adobe Acrobat and Reader on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.56% 0.962
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
http://www.securitytracker.com/id/1030711
Third Party Advisory
Broken Link
VDB Entry