Lucene search
HistoryDec 10, 2014 - 9:59 p.m.
CVE-2014-8452
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.012
Percentile
85.1%
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected configurations
Node
adobeacrobat_readerMatch10.0
ORadobeacrobat_readerMatch10.0.1
ORadobeacrobat_readerMatch10.0.2
ORadobeacrobat_readerMatch10.0.3
ORadobeacrobat_readerMatch10.1
ORadobeacrobat_readerMatch10.1.1
ORadobeacrobat_readerMatch10.1.2
ORadobeacrobat_readerMatch10.1.3
ORadobeacrobat_readerMatch10.1.4
ORadobeacrobat_readerMatch10.1.5
ORadobeacrobat_readerMatch10.1.6
ORadobeacrobat_readerMatch10.1.7
ORadobeacrobat_readerMatch10.1.8
ORadobeacrobat_readerMatch10.1.9
ORadobeacrobat_readerMatch10.1.10
ORadobeacrobat_readerMatch10.1.11
ORadobeacrobat_readerMatch10.1.12
ORadobeacrobat_readerMatch11.0.0
ORadobeacrobat_readerMatch11.0.01
ORadobeacrobat_readerMatch11.0.02
ORadobeacrobat_readerMatch11.0.03
ORadobeacrobat_readerMatch11.0.04
ORadobeacrobat_readerMatch11.0.05
ORadobeacrobat_readerMatch11.0.06
ORadobeacrobat_readerMatch11.0.07
ORadobeacrobat_readerMatch11.0.08
ORadobeacrobat_readerMatch11.0.09
applemac_os_x
ORmicrosoftwindows
Node
adobeacrobatMatch10.0
ORadobeacrobatMatch10.0.1
ORadobeacrobatMatch10.0.2
ORadobeacrobatMatch10.0.3
ORadobeacrobatMatch10.1
ORadobeacrobatMatch10.1.1
ORadobeacrobatMatch10.1.2
ORadobeacrobatMatch10.1.3
ORadobeacrobatMatch10.1.4
ORadobeacrobatMatch10.1.5
ORadobeacrobatMatch10.1.6
ORadobeacrobatMatch10.1.7
ORadobeacrobatMatch10.1.8
ORadobeacrobatMatch10.1.9
ORadobeacrobatMatch10.1.10
ORadobeacrobatMatch10.1.11
ORadobeacrobatMatch10.1.12
ORadobeacrobatMatch11.0
ORadobeacrobatMatch11.0.1
ORadobeacrobatMatch11.0.2
ORadobeacrobatMatch11.0.3
ORadobeacrobatMatch11.0.4
ORadobeacrobatMatch11.0.5
ORadobeacrobatMatch11.0.6
ORadobeacrobatMatch11.0.7
ORadobeacrobatMatch11.0.8
ORadobeacrobatMatch11.0.9
applemac_os_x
ORmicrosoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | acrobat_reader | 10.0 | cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.1 | cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.2 | cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.3 | cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1 | cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.1 | cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.2 | cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.3 | cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.4 | cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.1.5 | cpe:2.3:a:adobe:acrobat_reader:10.1.5:*:*:*:*:*:*:* |
Related
threatpost
threatpost
May 2015 Adobe Flash, Reader, Acrobat Security Updates
2015-05-12 12:43:10
cvelist
cvelist
CVE-2014-8452
2014-12-10 21:00:00
cve
cve
CVE-2014-8452
2014-12-10 21:59:23
checkpoint_advisories
checkpoint_advisories
Adobe Reader and Acrobat Information Disclosure (APSB14-28: CVE-2014-8452)
2015-01-13 00:00:00
prion
prion
Xxe
2014-12-10 21:59:00
securityvulns
securityvulns
Adobe Reader / Acrobat multiple security vulnerabilities
2015-05-13 00:00:00
kaspersky
kaspersky
KLA10440 Multiple vulnerabilities in Adobe Acrobat & Reader
2014-09-09 00:00:00
KLA10575 Multiple vulnerabilities in Adobe products
2015-05-12 00:00:00
nessus
nessus
openvas
openvas
Adobe Reader Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X
2014-12-11 00:00:00
Adobe Acrobat Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X
2014-12-11 00:00:00
Adobe Reader Multiple Vulnerabilities-01 (Dec 2014) - Windows
2014-12-11 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.012
Percentile
85.1%
Related for NVD:CVE-2014-8452