medium5.0
CVE-2014-8452
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external ent…
Impact
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Reader | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.1, 10.1.1 |
| Apple | Mac Os X | All versions |
| Microsoft | Windows | All versions |
| Adobe | Acrobat | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.1, 10.1.1 |