Adobe Reader and Acrobat Multiple Use After Free Remote Code Execution Vulnerabilities

Bugtraq ID:	74602
Class:	Unknown
CVE:	CVE-2015-3053 CVE-2015-3054 CVE-2015-3055 CVE-2015-3059 CVE-2015-3075
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	May 15 2015 12:10AM
Credit:	AbdulAziz Hariri, Brian Gorenc and bilou working with HP Zero Day Initiative, and anonymous from Beyond Security's SecuriTeam Secure Disclosure.
Vulnerable:	Adobe Reader 10.1.3 Adobe Reader 10.1.2 Adobe Reader 10.1.1 Adobe Reader 10.1 Adobe Reader 10.0.3 Adobe Reader 10.0.2 Adobe Reader 10.0.1 Adobe Reader 10.0 Adobe Acrobat 10.1.3 Adobe Acrobat 10.1.2 Adobe Acrobat 10.1.1 Adobe Acrobat 10.1 Adobe Acrobat 10.0.3 Adobe Acrobat 10.0.2 Adobe Acrobat 10.0.1 Adobe Acrobat 10.0
Not Vulnerable:

Adobe Reader and Acrobat Multiple Use After Free Remote Code Execution Vulnerabilities

Adobe Reader and Acrobat are prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Adobe Reader and Acrobat Multiple Use After Free Remote Code Execution Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Reader and Acrobat Multiple Use After Free Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Reader and Acrobat Multiple Use After Free Remote Code Execution Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Adobe Reader Homepage (Adobe)