CVE-2015-8458
Description
Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a multiple-layer PDF document, a different vulnerability than CVE-2015-6696 and CVE-2015-6698.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.796
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities affected in Acrobat DC 15.008.20082 | Windows |
| Multiple vulnerabilities affected in Acrobat Reader 11.0.9 | Windows |
| Vulnerability CVE-2015-5586,CVE-2015-7829,CVE-2015-8458 are affected in Adobe Acrobat DC (Classic Track) 11.0.12 | Windows |
| Vulnerability CVE-2015-5586,CVE-2015-7829,CVE-2015-8458 are affected in Adobe Acrobat Reader DC 11.0.12 | Windows |
| Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC MUI 11.0.12 | Windows |
| Vulnerabilities CVE-2015-8458 are affected in Adobe Acrobat X Standard 10.1.15 | Windows |
| Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 15.006.30060 | Mac |
| Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC for MAC 15.008.20082 | Mac |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-343119 | Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (24.004.20272) |
| PATCH-315465 | Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30527) (APSB20-48) |
| PATCH-315460 | Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30527) (APSB20-48) |
| PATCH-343120 | Adobe Acrobat Reader DC (24.004.20272) |
| PATCH-343122 | Adobe Acrobat Reader DC MUI (24.004.20272) |
| PATCH-302922 | Adobe Acrobat 10.1.16 Pro and Standard update - All languages (APSB15-24) (Deployment-Only) |
| PATCH-611991 | Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only) |
| PATCH-611989 | Adobe Acrobat Reader DC for MAC (25.001.20693)(Deployment-Only) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234