CVE-2015-3060
HighSummary
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to JavaScript functions, posing serious security threats to user data.
Recommendation
It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Reader i Acrobat
See all- CVE-2015-3059High
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
- CVE-2014-8460High
A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
- CVE-2014-8458High
Adobe Reader and Acrobat versions 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
- CVE-2014-0565High
Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- CVE-2014-0560High
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
- CVE-2009-3459High
A heap-based buffer overflow in Adobe Reader and Acrobat allows remote attackers to execute arbitrary code via a crafted PDF file. This affects versions 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2.
Original NVD description (English source)
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.