CVE-2015-5087

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…

published July 15, 2015

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

⚠️ This vulnerability could let a crafty attacker execute arbitrary code on systems running older versions of Adobe Reader or Acrobat! 🔥 Think of it like a waiter who accepts any order without verifying it — if they don’t check the kitchen’s menu, all sorts of unexpected dishes could end up on the table. This vulnerability creates a similar situation, where an attacker can sneak in some unwanted code without proper validation! An attacker could exploit this flaw to either run their own code or even crash Adobe Reader, resulting in a denial of service. This could lead to unauthorized access to sensitive information or disrupt workflow entirely, making it absolutely devastating!

Put simply

Think of it like a waiter who accepts any order without verifying it — if they don’t check the kitchen’s menu, all sorts of unexpected dishes could end up on the table. This vulnerability creates a similar situation, where an attacker can sneak in some unwanted code without proper validation! This vulnerability stems from memory corruption in specific versions of Adobe Reader and Acrobat on Windows and OS X, allowing attackers to execute arbitrary code by manipulating unspecified vectors.

What to do

An attacker could exploit this flaw to either run their own code or even crash Adobe Reader, resulting in a denial of service. This could lead to unauthorized access to sensitive information or disrupt workflow entirely, making it absolutely devastating! To mitigate this risk, immediately update Adobe Reader and Acrobat to versions 10.1.15, 11.0.12, 2015.006.30060, or 2015.008.20082, depending on your installation. Regularly check for and apply updates to ensure the latest security patches are in place! You've got this! Keeping your software updated is a simple yet powerful way to stay secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05589 · 92.9th percentile
Published
2015-07-15T14:00Z
EPSS history
Timeline
  • 15 JUL 14:00Z
    Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat…
    cvelistv5