Multiple Adobe Reader and Acrobat Memory Corruption Vulnerabilities
Multiple Adobe Reader and Acrobat Memory Corruption Vulnerabilities
Release date:
Updated on:
Affected Systems:
Adobe Acrobat 11.x
Adobe Acrobat 10.x
Adobe Reader 11.x
Adobe Reader 10.x
Description:
Bugtraq id: 74600
CVE (CAN) ID: CVE-2015-3070, CVE-2015-3049, CVE-2015-3076, CVE-2014-9161, CVE-2015-3052, CVE-2015-3046, CVE-2015-3050, CVE-2015-3051, CVE-2015-3056
Adobe Reader (also known as Acrobat Reader) is an excellent PDF document reading software developed by Adobe. Acrobat is a series of products launched in 1993 for enterprises, technicians and creative professionals, making smart document delivery and collaboration more flexible, reliable, and secure.
Adobe Reader/Acrobat 10.xand 11. x have multiple memory corruption vulnerabilities. Attackers can exploit these vulnerabilities to cause affected applications to reject services.
<* Source: Mateusz Jurczyk
Gynvael Coldwind
Wei Lei
Wu Hongjun
Link: https://helpx.adobe.com/security/products/reader/apsb15-10.html
*>
Suggestion:
Vendor patch:
Adobe
-----
Adobe has released a Security Bulletin (apsb15-10) and patches for this:
Apsb15-10: Security Updates available for Adobe Reader and Acrobat
Link: https://helpx.adobe.com/security/products/reader/apsb15-10.html
Patch download:
Http://www.adobe.com/support/downloads/product.jsp? Product = 10 & platform = Windows
Http://www.adobe.com/support/downloads/product.jsp? Product = 10 & platform = Macintosh
This article permanently updates the link address: