CVE-2015-4445

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…

published July 15, 2015

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

⚠️ A sneak peek behind the curtain! This vulnerability in Adobe Reader and Acrobat allows attackers to bypass JavaScript API restrictions, making it surprisingly easy to execute malicious scripts. 🔥 Think of it like a hotel with a side door that didn’t get locked — any guest can slip in without passing the front desk. This flaw lets attackers stroll right into the suite of your documents without any checks! An attacker could exploit this vulnerability to run unauthorized JavaScript code, enabling them to access or manipulate sensitive data within the PDF files. The consequences could be a data breach or unwanted changes, making this a concerning issue for users.

Put simply

Think of it like a hotel with a side door that didn’t get locked — any guest can slip in without passing the front desk. This flaw lets attackers stroll right into the suite of your documents without any checks! This vulnerability allows attackers to bypass the execution restrictions on Adobe's JavaScript APIs due to unspecified vectors, potentially allowing for unauthorized script execution within PDFs.

What to do

An attacker could exploit this vulnerability to run unauthorized JavaScript code, enabling them to access or manipulate sensitive data within the PDF files. The consequences could be a data breach or unwanted changes, making this a concerning issue for users. To protect yourself, update Adobe Reader and Acrobat to versions 10.1.15, 11.0.12, or later, ensuring all your software is patched to the latest version. Regularly check for updates as part of good security hygiene! You've got this! Patch your Adobe software, and you'll be one step closer to securing your PDFs! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06978 · 94.1th percentile
Published
2015-07-15T14:00Z
EPSS history
Timeline
  • 15 JUL 14:00Z
    Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…
    cvelistv5