CVE-2014-8457

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@adobe.com

Published

2014-12-10

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Acrobat (Adobe)
• Acrobat Reader (Adobe)
• Mac Os X (Apple)
• Windows (Microsoft)

References

• http://helpx.adobe.com/security/products/reader/apsb14-28.html