Vulnerability Details : CVE-2014-9150

Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS junction attack, a similar issue to CVE-2014-0568.
Publish Date : 2014-11-29 Last Update Date : 2014-12-17

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	6.4
Confidentiality Impact	None (There is no impact to the confidentiality of the system.)
Integrity Impact	Partial (Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	Partial (There is reduced performance or interruptions in resource availability.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Bypass a restriction or similar
CWE ID	362

- Products Affected By CVE-2014-9150

#	Product Type	Vendor	Product	Version	Update	Edition
1	Application	Adobe	Acrobat	11.0			Version Details Vulnerabilities
2	Application	Adobe	Acrobat	11.0.1			Version Details Vulnerabilities
3	Application	Adobe	Acrobat	11.0.2			Version Details Vulnerabilities
4	Application	Adobe	Acrobat	11.0.3			Version Details Vulnerabilities
5	Application	Adobe	Acrobat	11.0.4			Version Details Vulnerabilities
6	Application	Adobe	Acrobat	11.0.5	-	~~~windows~~	Version Details Vulnerabilities
7	Application	Adobe	Acrobat	11.0.6			Version Details Vulnerabilities
8	Application	Adobe	Acrobat	11.0.7			Version Details Vulnerabilities
9	Application	Adobe	Acrobat	11.0.8			Version Details Vulnerabilities
10	Application	Adobe	Acrobat Reader	11.0			Version Details Vulnerabilities
11	Application	Adobe	Acrobat Reader	11.0.1			Version Details Vulnerabilities
12	Application	Adobe	Acrobat Reader	11.0.2			Version Details Vulnerabilities
13	Application	Adobe	Acrobat Reader	11.0.3			Version Details Vulnerabilities
14	Application	Adobe	Acrobat Reader	11.0.4			Version Details Vulnerabilities
15	Application	Adobe	Acrobat Reader	11.0.5	-	~~~windows~~	Version Details Vulnerabilities
16	Application	Adobe	Acrobat Reader	11.0.6			Version Details Vulnerabilities
17	Application	Adobe	Acrobat Reader	11.0.7			Version Details Vulnerabilities
18	Application	Adobe	Acrobat Reader	11.0.8			Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Adobe	Acrobat	9
Adobe	Acrobat Reader	9

- References For CVE-2014-9150

https://code.google.com/p/google-security-research/issues/detail?id=103

http://helpx.adobe.com/security/products/reader/apsb14-28.html CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat Reader 11.0 Adobe Acrobat Reader 11.0.1 Adobe Acrobat Reader 11.0.2 Adobe Acrobat Reader 11.0.3 Adobe Acrobat Reader 11.0.4 Adobe Acrobat Reader 11.0.6 Adobe Acrobat Reader 11.0.5 ~~~windows~~ Adobe Acrobat Reader 11.0.7 Adobe Acrobat Reader 11.0.8	Microsoft Windows
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat 11.0 Adobe Acrobat 11.0.1 Adobe Acrobat 11.0.2 Adobe Acrobat 11.0.3 Adobe Acrobat 11.0.4 Adobe Acrobat 11.0.6 Adobe Acrobat 11.0.5 ~~~windows~~ Adobe Acrobat 11.0.7 Adobe Acrobat 11.0.8	Microsoft Windows

- Metasploit Modules Related To CVE-2014-9150

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)