10

CVE-2014-0568

The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Reader Version 10.0
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.0.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.0.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.0.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.4
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.5
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.6
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.7
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.8
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.9
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.10
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.4
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.5 Update - SwPlatform windows
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.6
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.7
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version 11.0.8
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0 Update - Edition pro
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0.1 Update - Edition pro
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.0.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.4
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.5
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.6
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.7
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.8
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.9
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.10
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.1
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.2
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.3
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.4
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.5 Update - SwPlatform windows
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.6
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.7
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version 11.0.8
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.12% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://helpx.adobe.com/security/products/reader/apsb14-20.html
Patch
Vendor Advisory
http://www.securitytracker.com/id/1030853
http://www.securityfocus.com/bid/69828
https://code.google.com/p/google-security-research/issues/detail?id=94
https://exchange.xforce.ibmcloud.com/vulnerabilities/96000