deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-6708
Published: 2015-10-14
Description: The ANStartApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-484; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6709
Published: 2015-10-14
Description: The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-486; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6710
Published: 2015-10-14
Description: The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-487; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6711
Published: 2015-10-14
Description: The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-485; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6712
Published: 2015-10-14
Description: The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-488; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6713
Published: 2015-10-14
Description: The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 7.5 (HIGH)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-489; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6714
Published: 2015-10-14
Description: The Function bind implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-490; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6715
Published: 2015-10-14
Description: The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-491; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6716
Published: 2015-10-14
Description: The ANSendForFormDistribution method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-507; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6717
Published: 2015-10-14
Description: The DynamicAnnotStore method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-499; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6718
Published: 2015-10-14
Description: The CBSharedReviewIfOfflineDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-503; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6719
Published: 2015-10-14
Description: The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-504; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6720
Published: 2015-10-14
Description: The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-506; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6721
Published: 2015-10-14
Description: The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-502; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6722
Published: 2015-10-14
Description: The CBSharedReviewStatusDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-501; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6723
Published: 2015-10-14
Description: The ANTrustPropagateAll method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-497; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6724
Published: 2015-10-14
Description: The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-495; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6725
Published: 2015-10-14
Description: The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-505; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7614
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions and execute arbitrary commands via an app.launchURL call, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-509; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7615
Published: 2015-10-14
Description: Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-493; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7616
Published: 2015-10-14
Description: The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-494; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7617
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code by leveraging improper EScript exception handling, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7621.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-492; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7618
Published: 2015-10-14
Description: The CBAutoConfigCommentRepository method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-498; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-7619
Published: 2015-10-14
Description: The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-500; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html