CVE-2015-5586

Description

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.518

Associated Vulnerability

VulnerabilityOS Platform
Upgrade air 19.0.0.190 to latest versionWindows
Multiple vulnerabilities affected in Acrobat DC 15.008.20082Windows
Multiple vulnerabilities affected in Acrobat Reader 11.0.9Windows
Vulnerability CVE-2015-5586,CVE-2015-7829,CVE-2015-8458 are affected in Adobe Acrobat DC (Classic Track) 11.0.12Windows
Vulnerability CVE-2015-5586,CVE-2015-7829,CVE-2015-8458 are affected in Adobe Acrobat Reader DC 11.0.12Windows
Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC MUI 11.0.12Windows
Multiple vulnerabilities affected in Adobe Acrobat X Standard 10.1.14Windows
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 15.006.30060Mac
Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC for MAC 15.008.20082Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343119Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (24.004.20272)
PATCH-315465Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30527) (APSB20-48)
PATCH-315460Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30527) (APSB20-48)
PATCH-343120Adobe Acrobat Reader DC (24.004.20272)
PATCH-343122Adobe Acrobat Reader DC MUI (24.004.20272)
PATCH-302922Adobe Acrobat 10.1.16 Pro and Standard update - All languages (APSB15-24) (Deployment-Only)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611989Adobe Acrobat Reader DC for MAC (25.001.20693)(Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234