medium6.8
CVE-2015-8458
Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 201…
Impact
Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a multiple-layer PDF document, a different vulnerability than CVE-2015-6696 and CVE-2015-6698.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 10.0 through 10.1.15 from 11.0.0 through 11.0.12 |
| Adobe | Acrobat Dc | from 15.006.30060 before 15.006.30094 from 15.008.20082 before 15.009.20069 |
| Adobe | Acrobat Reader | from 10.0 through 10.1.15 from 11.0.0 through 11.0.12 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 before 15.006.30094 from 15.008.20082 before 15.009.20069 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/79208
- http://www.zerodayinitiative.com/advisories/ZDI-15-637
- https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
- http://www.securityfocus.com/bid/79208
- http://www.zerodayinitiative.com/advisories/ZDI-15-637
- https://helpx.adobe.com/security/products/acrobat/apsb15-24.html