MALWARELIST.net – Your Information Security Source

Cyber Security Notifications: New Vulnerabilities of September 2014

Vulnerabilities: Bypass security restrictions in Adobe Reader and Adobe Acrobat

Danger level: High
Availability fix: No
Number of vulnerabilities: 1
CVSSv2 Rating: (AV: N / AC: M / Au: N / C: P / I: P / A: P / E: U / RL: U / RC: C) = Base: 6.8 / Temporal: 5.8

Vector operation: Remote
Impact: Security Bypass

Affected Products:

• Adobe Acrobat X 10.x
• Adobe Reader X 10.x
• Adobe Acrobat XI 11.x
• Adobe Reader XI 11.x

Affected versions:

• Adobe Reader XI 11.0.08 and earlier versions for Windows
• Adobe Acrobat XI 11.0.08 and earlier versions for Windows
• Adobe Reader XI 11.0.07 and earlier versions for Macintosh
• Adobe Acrobat XI 11.0.07 and earlier versions for Macintosh
• Adobe Reader X 10.1.11 and earlier versions for Windows
• Adobe Acrobat X 10.1.11 and earlier versions for Windows
• Adobe Reader X 10.1.10 and earlier versions for Macintosh
• Adobe Acrobat X 10.1.10 and earlier versions for Macintosh

Description:

Vulnerabilities allow malicious people to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error. Details not be disclosed.

Solution: The vulnerabilities exist in the moment. Adobe is planning to release security updates during the week of September 15, 2014.

Adobe Systems Incorporated has historically focused upon the creation of multimedia and creativity software products. It is best known for the Portable Document Format (PDF) and Adobe Creative Suite, later Adobe Creative Cloud.
Manufacturer URL: http://www.adobe.com/products/acrobat.html
Link: http://helpx.adobe.com/security/products/reader/apsb14-20.html