medium6.8
CVE-2015-6688
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.300…
Impact
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted Optional Content Groups (OCG) object in a WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 10.0 through 10.1.15 from 11.0.0 through 11.0.12 |
| Adobe | Acrobat Dc | from 15.006.30060 before 15.006.30094 from 15.008.20082 before 15.009.20069 |
| Adobe | Acrobat Reader | from 10.0 through 10.1.15 from 11.0.0 through 11.0.12 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 before 15.006.30094 from 15.008.20082 before 15.009.20069 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1033796
- http://www.zerodayinitiative.com/advisories/ZDI-15-469
- https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
- http://www.securitytracker.com/id/1033796
- http://www.zerodayinitiative.com/advisories/ZDI-15-469
- https://helpx.adobe.com/security/products/acrobat/apsb15-24.html