10
CVE-2014-8445
- EPSS 20.52%
- Veröffentlicht 10.12.2014 21:59:18
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@adobe.com
- Teams Watchlist Login
- Unerledigt Login
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Reader Version10.0
Adobe ≫ Acrobat Reader Version10.0.1
Adobe ≫ Acrobat Reader Version10.0.2
Adobe ≫ Acrobat Reader Version10.0.3
Adobe ≫ Acrobat Reader Version10.1
Adobe ≫ Acrobat Reader Version10.1.1
Adobe ≫ Acrobat Reader Version10.1.2
Adobe ≫ Acrobat Reader Version10.1.3
Adobe ≫ Acrobat Reader Version10.1.4
Adobe ≫ Acrobat Reader Version10.1.5
Adobe ≫ Acrobat Reader Version10.1.6
Adobe ≫ Acrobat Reader Version10.1.7
Adobe ≫ Acrobat Reader Version10.1.8
Adobe ≫ Acrobat Reader Version10.1.9
Adobe ≫ Acrobat Reader Version10.1.10
Adobe ≫ Acrobat Reader Version10.1.11
Adobe ≫ Acrobat Reader Version10.1.12
Adobe ≫ Acrobat Reader Version11.0.0
Adobe ≫ Acrobat Reader Version11.0.01
Adobe ≫ Acrobat Reader Version11.0.02
Adobe ≫ Acrobat Reader Version11.0.03
Adobe ≫ Acrobat Reader Version11.0.04
Adobe ≫ Acrobat Reader Version11.0.05
Adobe ≫ Acrobat Reader Version11.0.06
Adobe ≫ Acrobat Reader Version11.0.07
Adobe ≫ Acrobat Reader Version11.0.08
Adobe ≫ Acrobat Reader Version11.0.09
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 20.52% | 0.953 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.