CVE-2014-9161 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer20 documents2 sources
Severity
10.0CRITICALNVD
NVD9.3
EPSS
1.2%
top 20.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 30
Latest updateMay 17
Description
CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.
CVSS vector
AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0