CVE-2014-0546

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://helpx.adobe.com/security/products/reader/apsb14-19.html	Patch Vendor Advisory
http://www.securitytracker.com/id/1030711	Broken Link Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:adobe:acrobat::::::::
	cpe:2.3:a:adobe:acrobat::::::::
	cpe:2.3:a:adobe:acrobat_reader::::::::
	cpe:2.3:a:adobe:acrobat_reader::::::::

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

History

28 Jun 2024, 17:28

Type	Values Removed	Values Added
CPE	cpe:2.3:a:adobe:acrobat:10.1.4:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.7:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.3:::::::* cpe:2.3:a:adobe:acrobat:10.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.1:::::::* cpe:2.3:a:adobe:acrobat:11.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.4:::::::* cpe:2.3:a:adobe:acrobat:10.1.1:::::::* cpe:2.3:a:adobe:acrobat:11.0.7:::::::* cpe:2.3:a:adobe:acrobat:10.1.3:::::::* cpe:2.3:a:adobe:acrobat:11.0:::::::* cpe:2.3:a:adobe:acrobat:10.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.10:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.8:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.5:::::::* cpe:2.3:a:adobe:acrobat:10.1.10:::::::* cpe:2.3:a:adobe:acrobat:11.0.4:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1:::::::* cpe:2.3:a:adobe:acrobat:11.0.6:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.4:::::::* cpe:2.3:a:adobe:acrobat:10.1.6:::::::* cpe:2.3:a:adobe:acrobat:10.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:10.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.7:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.5:-::::windows::* cpe:2.3:a:adobe:acrobat:10.0:::::::* cpe:2.3:a:adobe:acrobat:10.1.5:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.3:::::::* cpe:2.3:a:adobe:acrobat:10.1.7:::::::* cpe:2.3:a:adobe:acrobat:11.0.5:-::::windows::* cpe:2.3:a:adobe:acrobat:11.0.1:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.6:::::::* cpe:2.3:a:adobe:acrobat:10.1.2:::::::* cpe:2.3:a:adobe:acrobat_reader:10.1.9:::::::* cpe:2.3:a:adobe:acrobat:10.1.8:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.1:::::::* cpe:2.3:a:adobe:acrobat:10.0.1:::::::* cpe:2.3:a:adobe:acrobat:11.0.3:::::::* cpe:2.3:a:adobe:acrobat_reader:11.0.6:::::::* cpe:2.3:a:adobe:acrobat:10.1.9:::::::*	cpe:2.3:a:adobe:acrobat_reader:::::::: cpe:2.3:a:adobe:acrobat::::::::
CVSS	v2 : ~~10.0~~ v3 : ~~unknown~~	v2 : 10.0 v3 : 9.8
References	~~() http://www.securitytracker.com/id/1030711 -~~	() http://www.securitytracker.com/id/1030711 - Broken Link, Third Party Advisory, VDB Entry

Information

Published : 2014-08-12 21:55

Updated : 2024-06-28 17:28

NVD link : CVE-2014-0546

Mitre link : CVE-2014-0546

CVE.ORG link : CVE-2014-0546

JSON object : View

Products Affected

adobe

acrobat
acrobat_reader

microsoft

windows

CWE

NVD-CWE-noinfo

9.8 /10