CVE-2015-4449
Description
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2014-8450, CVE-2015-4450, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.761
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities fixed in Adobe Reader 10.1.15 update - All languages (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Acrobat 10.1.15 Pro and Standard update - All languages (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Reader 11.0.12 update - Multilingual (MUI) installer (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Acrobat 11.0.12 Pro and Standard update - All languages (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Reader 10.1.15 update - Multilingual (MUI) installer (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Reader 11.0.12 update - All languages (APSB15-15) | Windows |
| Multiple vulnerabilities fixed in Adobe Acrobat Reader DC 2015.008.20082 | Windows |
| Multiple vulnerabilities fixed in 2015.006.30060 | Windows |
| Multiple vulnerabilities affected in Acrobat DC 15.007.20033 | Windows |
| Multiple vulnerabilities affected in Acrobat Reader 11.0.9 | Windows |
| Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC MUI 11.0.11 | Windows |
| Multiple vulnerabilities affected in Adobe Acrobat X Standard 10.1.14 | Windows |
| Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 15.006.30033 | Mac |
| Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC for MAC 15.007.20033 | Mac |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-302116 | Adobe Reader 10.1.15 update - All languages (APSB15-15) |
| PATCH-302120 | Adobe Acrobat 10.1.15 Pro and Standard update - All languages (APSB15-15) |
| PATCH-302119 | Adobe Reader 11.0.12 update - Multilingual (MUI) installer (APSB15-15) |
| PATCH-302121 | Adobe Acrobat 11.0.12 Pro and Standard update - All languages (APSB15-15) |
| PATCH-302117 | Adobe Reader 10.1.15 update - Multilingual (MUI) installer (APSB15-15) |
| PATCH-302118 | Adobe Reader 11.0.12 update - All languages (APSB15-15) |
| PATCH-343120 | Adobe Acrobat Reader DC (24.004.20272) |
| PATCH-315460 | Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30527) (APSB20-48) |
| PATCH-343119 | Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (24.004.20272) |
| PATCH-315465 | Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30527) (APSB20-48) |
| PATCH-343122 | Adobe Acrobat Reader DC MUI (24.004.20272) |
| PATCH-302922 | Adobe Acrobat 10.1.16 Pro and Standard update - All languages (APSB15-24) (Deployment-Only) |
| PATCH-611991 | Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only) |
| PATCH-611989 | Adobe Acrobat Reader DC for MAC (25.001.20693)(Deployment-Only) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234