Vulnerability Details : CVE-2015-3069
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.
Vulnerability category: BypassGain privilege
Products affected by CVE-2015-3069
- cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat_reader:11.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:10.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:11.0.10:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-3069
4.69%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 93 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-3069
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2015-3069
-
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-3069
-
http://www.securitytracker.com/id/1032284
Adobe Reader and Acrobat Bugs Let Remote Users Execute Arbitrary Code, Obtain Information, any Deny Service - SecurityTrackerThird Party Advisory;VDB Entry
-
https://helpx.adobe.com/security/products/reader/apsb15-10.html
Adobe Security BulletinPatch;Vendor Advisory
-
http://www.securityfocus.com/bid/74604
Adobe Reader and Acrobat Multiple Security Bypass VulnerabilitiesThird Party Advisory;VDB Entry
-
http://www.zerodayinitiative.com/advisories/ZDI-15-205
ZDI-15-205 | Zero Day InitiativeThird Party Advisory;VDB Entry
Jump to