CVEvulnerability
CVE-2014-9161
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-01-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.
Affected configurations
• adobe acrobat reader 10.1.13
• adobe acrobat reader 11.0.10
• adobe acrobat 10.0
• adobe acrobat 10.0.1
• adobe acrobat 10.0.2
• adobe acrobat 10.0.3
• adobe acrobat 10.1
• adobe acrobat 10.1.1
• adobe acrobat 10.1.2
• adobe acrobat 10.1.3
• adobe acrobat 10.1.4
• adobe acrobat 10.1.5
• adobe acrobat 10.1.6
• adobe acrobat 10.1.7
• adobe acrobat 10.1.8
• adobe acrobat 10.1.9
• adobe acrobat 10.1.10
• adobe acrobat 10.1.11
• adobe acrobat 10.1.12
• adobe acrobat 11.0
• adobe acrobat 11.0.1
• adobe acrobat 11.0.2
• adobe acrobat 11.0.3
• adobe acrobat 11.0.4
• adobe acrobat 11.0.5
• adobe acrobat 11.0.6
• adobe acrobat 11.0.7
• adobe acrobat 11.0.8
• adobe acrobat 11.0.9
• adobe acrobat 10.1.13
• adobe acrobat 11.0.10
• adobe acrobat reader 10.0
• adobe acrobat reader 10.0.1
• adobe acrobat reader 10.0.2
• adobe acrobat reader 10.0.3
• adobe acrobat reader 10.1
• adobe acrobat reader 10.1.1
• adobe acrobat reader 10.1.2
• adobe acrobat reader 10.1.3
• adobe acrobat reader 10.1.4
• adobe acrobat reader 10.1.5
• adobe acrobat reader 10.1.6
• adobe acrobat reader 10.1.7
• adobe acrobat reader 10.1.8
• adobe acrobat reader 10.1.9
• adobe acrobat reader 10.1.10
• adobe acrobat reader 10.1.11
• adobe acrobat reader 10.1.12
• adobe acrobat reader 11.0.0
• adobe acrobat reader 11.0.01
• adobe acrobat reader 11.0.02
• adobe acrobat reader 11.0.03
• adobe acrobat reader 11.0.04
• adobe acrobat reader 11.0.05
• adobe acrobat reader 11.0.06
• adobe acrobat reader 11.0.07
• adobe acrobat reader 11.0.08
• adobe acrobat reader 11.0.09
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://code.google.com/p/google-security-research/issues/detail?id=149 code.google.com
- http://packetstormsecurity.com/files/134394/Adobe-Reader-X-XI-Out-Of-Bounds-Read.html packetstormsecurity.com
- http://www.securityfocus.com/bid/74600 www.securityfocus.com
- http://www.securitytracker.com/id/1032284 www.securitytracker.com
- https://helpx.adobe.com/security/products/reader/apsb15-10.html Vendor Advisory
- http://code.google.com/p/google-security-research/issues/detail?id=149 code.google.com
- http://packetstormsecurity.com/files/134394/Adobe-Reader-X-XI-Out-Of-Bounds-Read.html packetstormsecurity.com
- http://www.securityfocus.com/bid/74600 www.securityfocus.com
- http://www.securitytracker.com/id/1032284 www.securitytracker.com
- https://helpx.adobe.com/security/products/reader/apsb15-10.html Vendor Advisory