Vulnerabilities > Adobe > Acrobat Reader > 11.0.03

DATE CVE VULNERABILITY TITLE RISK
2014-12-10 CVE-2014-8458 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8457 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.
network
low complexity
adobe apple microsoft CWE-119
critical
10.0
2014-12-10 CVE-2014-8456 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8455 Use After Free Remote Code Execution vulnerability in Adobe Reader and Acrobat
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165.
network
low complexity
adobe apple microsoft
critical
10.0
2014-12-10 CVE-2014-8454 Use After Free Remote Code Execution vulnerability in Adobe Reader and Acrobat
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165.
network
low complexity
adobe apple microsoft
critical
10.0
2014-12-10 CVE-2014-8453 Permissions, Privileges, and Access Controls vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
network
low complexity
adobe apple microsoft CWE-264
5.0
2014-12-10 CVE-2014-8452 Information Exposure vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
network
low complexity
adobe apple microsoft CWE-200
5.0
2014-12-10 CVE-2014-8451 Information Exposure vulnerability in multiple products
An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8448.
network
low complexity
adobe apple microsoft CWE-200
5.0
2014-12-10 CVE-2014-8449 Numeric Errors vulnerability in multiple products
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
network
low complexity
adobe apple microsoft CWE-189
critical
10.0
2014-12-10 CVE-2014-8448 Information Exposure vulnerability in multiple products
An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8451.
network
low complexity
adobe apple microsoft CWE-200
5.0