Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-7622 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat DC

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer15 documents3 sources
Severity
10.0CRITICALNVD
NVD6.8
EPSS
19.7%
top 4.56%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
Adobe Acrobat DCAdobe Acrobat Reader DCAdobe Acrobat+1 more
Timeline
PublishedOct 14
Latest updateMay 13

Description

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6693, CVE-2015-6694, and CVE-2015-6695.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶NVDadobe/acrobat_reader_dc15.006.30060 — 15.006.30094+1
▶NVDadobe/acrobat_reader10.0 — 10.1.15+1
▶NVDadobe/acrobat_dc15.006.30060 — 15.006.30094+1
▶NVDadobe/acrobat10.0 — 10.1.15+1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

7
GHSA
GHSA-v9xf-2767-3v8v: Adobe Reader and Acrobat 10↗2022-05-13
▶
GHSA
GHSA-4j77-57g7-9jgm: Adobe Reader and Acrobat 10↗2022-05-13
▶
GHSA
GHSA-x4g3-938c-pqqc: Adobe Reader and Acrobat 10↗2022-05-13
▶
GHSA
GHSA-2m8j-8668-5vg5: The signatureSetSeedValue method in Adobe Reader and Acrobat 10↗2022-05-13
▶
GHSA
GHSA-hp8q-jv2q-wp3j: Adobe Reader and Acrobat 10↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
Acrobat Reader DC 15.008.20082.15957 - '.PDF' Parsing Memory Corruption↗2015-11-23
▶
CVE-2015-7622 — Adobe Acrobat DC vulnerability | cvebase