CVE-2015-3073

high · 10

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, and CVE-2015-3074.

CVSS

25.5%

EPSS (exploit prob.)

98th

EPSS percentile

2015-05-13

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-284

Affected products

Vendor	Product	Affected versions
adobe	acrobat	10.1.0
adobe	acrobat	10.1.1
adobe	acrobat	10.1.2
adobe	acrobat	10.1.3
adobe	acrobat	10.1.4
adobe	acrobat	10.1.5
adobe	acrobat	10.1.6
adobe	acrobat	10.1.7
adobe	acrobat	10.1.8
adobe	acrobat	10.1.9
adobe	acrobat	10.1.10
adobe	acrobat	10.1.11
adobe	acrobat	10.1.12
adobe	acrobat	10.1.13
adobe	acrobat	11.0.0
adobe	acrobat	11.0.1
adobe	acrobat	11.0.2
adobe	acrobat	11.0.3
adobe	acrobat	11.0.4
adobe	acrobat	11.0.5
adobe	acrobat	11.0.6
adobe	acrobat	11.0.7
adobe	acrobat	11.0.8
adobe	acrobat	11.0.9
adobe	acrobat	11.0.10
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	acrobat_reader	10.1.0
adobe	acrobat_reader	10.1.1
adobe	acrobat_reader	10.1.2
adobe	acrobat_reader	10.1.3
adobe	acrobat_reader	10.1.4
adobe	acrobat_reader	10.1.5
adobe	acrobat_reader	10.1.6
adobe	acrobat_reader	10.1.7
adobe	acrobat_reader	10.1.8
adobe	acrobat_reader	10.1.9
adobe	acrobat_reader	10.1.10
adobe	acrobat_reader	10.1.11
adobe	acrobat_reader	10.1.12

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-3073