Desktop Software
Memory Corruption
CVE-2014-8446 - Adobe Acrobat/Reader - Memory Corruption
Memory corruption vulnerability that could lead to code execution.
.png)
Overview
Memory corruption vulnerability that could lead to code execution.
A vulnerability, which was classified as critical, was found in Adobe Acrobat and Reader up to 11.0.09. This affects an unknown function. The manipulation with an unknown input leads to memory corruption. This is going to have an impact on confidentiality, integrity, and availability.It is possible to initiate the attack remotely. No form of authentication is needed for exploitation.
Vulnerability details
Memory corruption vulnerability that could lead to code execution. A vulnerability, which was classified as critical, was found in Adobe Acrobat and Reader up to 11.0.09. This affects an unknown function.
Disclosure timeline
2014-05-15 Reported to Vendor
2014-05-16 Response received from Vendor
2014-10-22 CVE assigned
2014-12-09 Advisory & Patch released
References
Credits
Ashfaq Ansari
Related Advisories
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
