CVE-2015-6703 — Missing Release of Resource after Effective Lifetime in Adobe Acrobat DC
Severity
6.8MEDIUMNVD
NVD5.0NVD4.3
EPSS
2.1%
top 15.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 14
Latest updateMay 13
Description
The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, and CVE-2015-6704.
CVSS vector
AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9
Affected Packages4 packages
Patches
🔴Vulnerability Details
7GHSA▶
GHSA-447v-mw2w-93h8: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10↗2022-05-13
GHSA
▶