CVE-2015-5099

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before…

published July 15, 2015

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

🚨 An unexpected twist in Adobe's Reader saga! A use-after-free vulnerability leaves your files vulnerable to arbitrary code execution, and it sneaks through various versions before updates are applied. 🔥 Think of it like a restaurant that serves meals with a forgotten ingredient. When the chef fails to remove a spoiled item from the pantry, it can ruin the dish and potentially poison the diners. Here, the application tries to use memory that’s already been freed, leading to unexpected behavior and security risks. An attacker could craft a malicious PDF that, when opened, allows them to run arbitrary code on your system. This could mean anything from stealing sensitive data to taking complete control over your computer! This is absolutely devastating if you’re not on the latest versions.

Put simply

Think of it like a restaurant that serves meals with a forgotten ingredient. When the chef fails to remove a spoiled item from the pantry, it can ruin the dish and potentially poison the diners. Here, the application tries to use memory that’s already been freed, leading to unexpected behavior and security risks. This use-after-free vulnerability in Adobe Reader and Acrobat impacts versions prior to 10.1.15 and 11.0.12, along with DC Classic and Continuous versions below 2015.006.30060 and 2015.008.20082. It allows attackers to exploit freed memory references, leading to arbitrary code execution.

What to do

An attacker could craft a malicious PDF that, when opened, allows them to run arbitrary code on your system. This could mean anything from stealing sensitive data to taking complete control over your computer! This is absolutely devastating if you’re not on the latest versions. To protect yourself, update Adobe Reader and Acrobat to the latest versions immediately. For those on older versions, ensure you're at least on 10.1.15 for 10.x series or 11.0.12 for 11.x series, along with the relevant patches for DC. Regularly check for updates to stay secure! You’ve got this! Staying updated is your best defense, and with these steps, you’ll keep your system locked down tight! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06590 · 93.8th percentile
Published
2015-07-15T14:00Z
EPSS history
Timeline
  • 15 JUL 14:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before…
    cvelistv5