6.8

CVE-2015-6693

The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted arguments, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622.

Data is provided by the National Vulnerability Database (NVD)
AdobeAcrobat Version >= 10.0 <= 10.1.15
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Version >= 11.0.0 <= 11.0.12
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Dc SwEditionclassic Version >= 15.006.30060 < 15.006.30094
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Dc SwEditioncontinuous Version >= 15.008.20082 < 15.009.20069
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Reader Version >= 10.0 <= 10.1.15
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Reader Version >= 11.0.0 <= 11.0.12
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Reader Dc SwEditionclassic Version >= 15.006.30060 < 15.006.30094
   ApplemacOS Version-
   MicrosoftWindows Version-
AdobeAcrobat Reader Dc SwEditioncontinuous Version >= 15.008.20082 < 15.009.20069
   ApplemacOS Version-
   MicrosoftWindows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.83% 0.736
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.