Adobe Reader, Acrobat vulnerabilities

A use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, and Acrobat and Acrobat Reader DC Classic before 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X, allows attackers to execute arbitrary code via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198 and DC Continuous before version 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

An untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors.

An untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

An untrusted search path vulnerability in Adobe Reader and Acrobat before version 11.0.16, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors.

An untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, and Acrobat and Acrobat Reader DC Classic before 15.006.30121, and DC Continuous before 15.010.20060 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, allowing attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code.

Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This is a different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.

The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

A use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, and in Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as in Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code.

Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG 2000 data.

A double free vulnerability in Adobe Reader and Acrobat before version 11.0.14, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code via a crafted ExtGState dictionary.

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, and in Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X.

Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FileAttachment annotation.

Adobe Reader and Acrobat in versions 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

In Adobe Reader and Acrobat versions 10.x before 10.1.16 and 11.x before 11.0.13, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, there is a vulnerability that allows attackers to bypass JavaScript API execution restrictions. This is a different vulnerability than those listed in CVE-2015-6707 to CVE-2015-6725 and CVE-2015-7614 to CVE-2015-7623.

A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as in Acrobat and Acrobat Reader DC Classic before version 2015.006.30060 and in Acrobat and Acrobat Reader DC Continuous before version 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code.

Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code.

A heap-based buffer overflow in Adobe Reader and Acrobat allows for arbitrary code execution. This affects versions 10.x before 10.1.15, 11.x before 11.0.12, and various versions of Acrobat and Acrobat Reader DC on Windows and OS X.

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before version 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before version 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

A heap-based buffer overflow in Adobe Reader and Acrobat allows attackers to execute arbitrary code. This affects versions 10.x before 10.1.15, 11.x before 11.0.12, and DC versions before specified updates.

Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code.

A heap-based buffer overflow in Adobe Reader and Acrobat allows attackers to execute arbitrary code. This affects versions 10.x before 10.1.15, 11.x before 11.0.12, and DC versions before specified updates.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and in Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to cause a denial of service via invalid data.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass intended access restrictions and perform a transition from Low Integrity to Medium Integrity via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass intended access restrictions and perform a transition from Low Integrity to Medium Integrity via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.