CVE-2014-0525

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@adobe.com

Published

2014-05-14

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Acrobat (Adobe)
• Acrobat Reader (Adobe)

References

• http://helpx.adobe.com/security/products/reader/apsb14-15.html