CVE-2015-6684
published 2015-10-14CVE-2015-6684: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before…
PriorityP351critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
6.80%
93.3th percentile
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 10.0 – 10.1.15 | — |
| adobe | acrobat | 11.0.0 – 11.0.12 | — |
| adobe | acrobat_dc | >= 15.006.30060 < 15.006.30094 | 15.006.30094 |
| adobe | acrobat_dc | >= 15.008.20082 < 15.009.20069 | 15.009.20069 |
| adobe | acrobat_reader | 10.0 – 10.1.15 | — |
| adobe | acrobat_reader | 11.0.0 – 11.0.12 | — |
| adobe | acrobat_reader_dc | >= 15.006.30060 < 15.006.30094 | 15.006.30094 |
| adobe | acrobat_reader_dc | >= 15.008.20082 < 15.009.20069 | 15.009.20069 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7qmm-crg7-cffg: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-5586 [CRITICAL] CWE-416 GHSA-7qmm-crg7-cffg: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-64pv-vr32-fqfm: Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6690 [CRITICAL] CWE-416 GHSA-64pv-vr32-fqfm: Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10
Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-44cq-9ww7-c4gc: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-7621 [CRITICAL] CWE-416 GHSA-44cq-9ww7-c4gc: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted U3D object, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7617.
GHSA
GHSA-84gc-mwwx-2x6j: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6689 [CRITICAL] CWE-416 GHSA-84gc-mwwx-2x6j: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-c77h-2f4c-x8q8: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6688 [CRITICAL] CWE-416 GHSA-c77h-2f4c-x8q8: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted Optional Content Groups (OCG) object in a WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-5pv9-vw8r-7rx3: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6691 [CRITICAL] CWE-416 GHSA-5pv9-vw8r-7rx3: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-v599-g95q-gc6f: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6683 [CRITICAL] CWE-416 GHSA-v599-g95q-gc6f: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-4q2g-2wf5-83r6: Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-7615 [CRITICAL] CWE-416 GHSA-4q2g-2wf5-83r6: Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10
Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-rq97-7qf9-rh8f: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6687 [CRITICAL] CWE-416 GHSA-rq97-7qf9-rh8f: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
GHSA
GHSA-6wmr-jwhh-q9m7: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-7617 [CRITICAL] CWE-416 GHSA-6wmr-jwhh-q9m7: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code by leveraging improper EScript exception handling, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7621.
GHSA
GHSA-gq5r-249p-4958: Use-after-free vulnerability in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 10.0
CVE-2015-6684 [CRITICAL] CWE-416 GHSA-gq5r-249p-4958: Use-after-free vulnerability in Adobe Reader and Acrobat 10
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securitytracker.com/id/1033796https://helpx.adobe.com/security/products/acrobat/apsb15-24.htmlhttps://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1205http://www.securitytracker.com/id/1033796https://helpx.adobe.com/security/products/acrobat/apsb15-24.htmlhttps://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1205
2015-10-14
Published