CVE-2015-6701
published 2015-10-14CVE-2015-6701: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC…
PriorityP423medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
3.84%
89.0th percentile
The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 10.0 – 10.1.15 | — |
| adobe | acrobat | 11.0.0 – 11.0.12 | — |
| adobe | acrobat_dc | >= 15.006.30060 < 15.006.30094 | 15.006.30094 |
| adobe | acrobat_dc | >= 15.008.20082 < 15.009.20069 | 15.009.20069 |
| adobe | acrobat_reader | 10.0 – 10.1.15 | — |
| adobe | acrobat_reader | 11.0.0 – 11.0.12 | — |
| adobe | acrobat_reader_dc | >= 15.006.30060 < 15.006.30094 | 15.006.30094 |
| adobe | acrobat_reader_dc | >= 15.008.20082 < 15.009.20069 | 15.009.20069 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-447v-mw2w-93h8: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6701 [MEDIUM] CWE-772 GHSA-447v-mw2w-93h8: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10
The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
GHSA
GHSA-6cwp-ghjg-988r: The createSquareMesh function in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6702 [MEDIUM] CWE-772 GHSA-6cwp-ghjg-988r: The createSquareMesh function in Adobe Reader and Acrobat 10
The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6703, and CVE-2015-6704.
GHSA
GHSA-m42w-g7pg-9j84: The loadFlashMovie function in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6703 [MEDIUM] CWE-772 GHSA-m42w-g7pg-9j84: The loadFlashMovie function in Adobe Reader and Acrobat 10
The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, and CVE-2015-6704.
GHSA
GHSA-7g52-xhrg-672g: The addForegroundSprite function in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6699 [MEDIUM] CWE-772 GHSA-7g52-xhrg-672g: The addForegroundSprite function in Adobe Reader and Acrobat 10
The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
GHSA
GHSA-wj4x-ccxf-pr24: The setBackground function in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6700 [MEDIUM] CWE-772 GHSA-wj4x-ccxf-pr24: The setBackground function in Adobe Reader and Acrobat 10
The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
GHSA
GHSA-vr9x-jfpj-g523: Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 4.3
CVE-2015-6697 [MEDIUM] CWE-772 GHSA-vr9x-jfpj-g523: Adobe Reader and Acrobat 10
Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to obtain sensitive information about color objects from process memory by reading a light object's RGB data, a different vulnerability than CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.
GHSA
GHSA-mp86-7hpx-2vcw: The animations property implementation in Adobe Reader and Acrobat 10
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-6704 [MEDIUM] CWE-772 GHSA-mp86-7hpx-2vcw: The animations property implementation in Adobe Reader and Acrobat 10
The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, and CVE-2015-6703.
Red Hat
kernel: AIO write triggers integer overflow in some protocols
vendor_redhat·2015-03-21·CVSS 7.8
CVE-2015-8830 [HIGH] CWE-190 kernel: AIO write triggers integer overflow in some protocols
kernel: AIO write triggers integer overflow in some protocols
Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, as the related AIO vector code is not present in this product.
This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7. Future Linux kernel updates for the respective releases might address this issue.
This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. This flaw is not curr
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securitytracker.com/id/1033796http://www.zerodayinitiative.com/advisories/ZDI-15-479https://helpx.adobe.com/security/products/acrobat/apsb15-24.htmlhttp://www.securitytracker.com/id/1033796http://www.zerodayinitiative.com/advisories/ZDI-15-479https://helpx.adobe.com/security/products/acrobat/apsb15-24.html
2015-10-14
Published