CVE-2015-4447

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…

published July 15, 2015

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

⚠️ A seemingly innocent JavaScript API might just let attackers waltz right past execution restrictions! Think of it like a restaurant where the chef lets unauthorized diners into the kitchen with a secret passphrase — no one knows it’s happening until the lasagna is missing all the secret ingredients! An attacker could exploit this vulnerability to execute malicious scripts, potentially leading to data leaks or unauthorized access. The consequences could be severe, allowing bad actors to manipulate documents or extract sensitive information from users' systems.

Put simply

Think of it like a restaurant where the chef lets unauthorized diners into the kitchen with a secret passphrase — no one knows it’s happening until the lasagna is missing all the secret ingredients! This vulnerability in Adobe Reader and Acrobat allows attackers to bypass JavaScript API execution restrictions, making it easier for them to run unauthorized scripts. It affects versions prior to 10.1.15, 11.0.12, and various DC versions on Windows and OS X.

What to do

An attacker could exploit this vulnerability to execute malicious scripts, potentially leading to data leaks or unauthorized access. The consequences could be severe, allowing bad actors to manipulate documents or extract sensitive information from users' systems. To remediate, update Adobe Reader and Acrobat to the latest versions: 10.1.15, 11.0.12, 2015.006.30060, and 2015.008.20082. Regularly check for updates to keep your software secure! You’ve got this! Stay vigilant, keep those updates rolling, and you’ll be securing your digital world in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07653 · 94.6th percentile
Published
2015-07-15T14:00Z
EPSS history
Timeline
  • 15 JUL 14:00Z
    Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…
    cvelistv5