deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7369
Published: 2015-10-14
Description: The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Oct/32; http://www.revive-adserver.com/security/revive-sa-2015-001
CVE: CVE-2015-7370
Published: 2015-10-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026, allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data-file parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Oct/32; http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx
CVE: CVE-2015-7371
Published: 2015-10-14
Description: Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264, CWE-399
References: http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Oct/32; http://www.revive-adserver.com/security/revive-sa-2015-001
CVE: CVE-2015-7372
Published: 2015-10-14
Description: Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Oct/32; http://www.revive-adserver.com/security/revive-sa-2015-001
CVE: CVE-2015-7373
Published: 2015-10-14
Description: Cross-site scripting (XSS) vulnerability in the "magic-macros" feature in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via a GET parameter, which is not properly handled in a banner.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Oct/32; http://www.revive-adserver.com/security/revive-sa-2015-001
CVE: CVE-2015-5569
Published: 2015-10-14
Description: Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html
CVE: CVE-2015-5583
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PDF information by launching a print job on a remote printer, a different vulnerability than CVE-2015-6705, CVE-2015-6706, and CVE-2015-7624.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-468; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-5586
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6683
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1206
CVE: CVE-2015-6684
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1205
CVE: CVE-2015-6685
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) by using the Format action for unspecified fields, a different vulnerability than CVE-2015-6686, CVE-2015-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-467; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6686
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted set of fields, a different vulnerability than CVE-2015-6685, CVE-2015-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-466; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6687
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6688
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via a crafted Optional Content Groups (OCG) object in a WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-469; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6689
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via a crafted WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-470; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6690
Published: 2015-10-14
Description: Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-474; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6691
Published: 2015-10-14
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6692
Published: 2015-10-14
Description: Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6693
Published: 2015-10-14
Description: The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted arguments, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-473; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6694
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted use of the fillColor attribute, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6693, CVE-2015-6695, and CVE-2015-7622.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-471; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6695
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted use of the value attribute, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6693, CVE-2015-6694, and CVE-2015-7622.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-472; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6696
Published: 2015-10-14
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6698.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/77068; http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-569
CVE: CVE-2015-6697
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to obtain sensitive information about color objects from process memory by reading a light object's RGB data, a different vulnerability than CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-475; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6698
Published: 2015-10-14
Description: Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6696.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/77068; http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-476
CVE: CVE-2015-6699
Published: 2015-10-14
Description: The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-477; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6700
Published: 2015-10-14
Description: The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-478; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6701
Published: 2015-10-14
Description: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-479; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6702
Published: 2015-10-14
Description: The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6703, and CVE-2015-6704.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-480; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6703
Published: 2015-10-14
Description: The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, and CVE-2015-6704.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-481; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6704
Published: 2015-10-14
Description: The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, and CVE-2015-6703.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-482; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
CVE: CVE-2015-6705
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5583, CVE-2015-6706, and CVE-2015-7624.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6706
Published: 2015-10-14
Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5583, CVE-2015-6705, and CVE-2015-7624.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1033796; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html; http://www.securitytracker.com/id/1033796
CVE: CVE-2015-6707
Published: 2015-10-14
Description: The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]4, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]9 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securitytracker.com/id/1033796; http://www.zerodayinitiative.com/advisories/ZDI-15-483; https://helpx.adobe.com/security/products/acrobat/apsb15-24.html