CVE-2016-0943

HIGH · 8.8 CVSS Gepubliceerd: 14-01-2016 CWE-264

Beschrijving

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Vendors

Adobe Apple Microsoft

Affected products

Acrobat Dc Acrobat Reader Dc Mac Os X Windows Acrobat Reader Acrobat

References

www.securitytracker.com
zerodayinitiative.com
helpx.adobe.com