ID

VAR-201511-0276


CVE

CVE-2015-7650


TITLE

Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2015-005722

DESCRIPTION

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted CMAP table in a PDF document, a different vulnerability than CVE-2015-6685, CVE-2015-6686, CVE-2015-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the way CMAP tables are parsed. A specially crafted CMAP table embedded in a PDF file can force Adobe Acrobat Reader to read memory past the end of an allocated object. An attacker could leverage this vulnerability to execute arbitrary code under the context of the current process. Failed exploit attempts will likely cause a denial-of-service condition. Adobe Reader, etc. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF. Classic and Continuous are two update mechanisms provided by Acrobat Reader DC Product Download Center. Security flaws exist in several Adobe products. 30060 and earlier, Acrobat XI Desktop 11.0.12 and earlier, Reader XI Desktop 11.0.12 and earlier, Acrobat X Desktop 10.1.15 and earlier, Reader X Desktop 10.1.15 and earlier

Trust: 2.61

sources: NVD: CVE-2015-7650 // JVNDB: JVNDB-2015-005722 // ZDI: ZDI-15-534 // BID: 77404 // VULHUB: VHN-85611

AFFECTED PRODUCTS

vendor:adobemodel:acrobat dcscope:gteversion:15.006.30060

Trust: 1.0

vendor:adobemodel:acrobat dcscope:gteversion:15.008.20082

Trust: 1.0

vendor:adobemodel:acrobatscope:lteversion:10.1.15

Trust: 1.0

vendor:adobemodel:acrobatscope:gteversion:10.0

Trust: 1.0

vendor:adobemodel:acrobat readerscope:lteversion:10.1.15

Trust: 1.0

vendor:adobemodel:acrobat readerscope:gteversion:10.0

Trust: 1.0

vendor:adobemodel:acrobat dcscope:ltversion:15.006.30094

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:ltversion:15.009.20069

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:gteversion:15.006.30060

Trust: 1.0

vendor:adobemodel:acrobat dcscope:ltversion:15.009.20069

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:gteversion:15.008.20082

Trust: 1.0

vendor:adobemodel:acrobatscope:lteversion:11.0.12

Trust: 1.0

vendor:adobemodel:acrobat readerscope:lteversion:11.0.12

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:ltversion:15.006.30094

Trust: 1.0

vendor:adobemodel:acrobatscope:gteversion:11.0.0

Trust: 1.0

vendor:adobemodel:acrobat readerscope:gteversion:11.0.0

Trust: 1.0

vendor:adobemodel:acrobat dcscope:ltversion:(windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:ltversion:(windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:eqversion:classic 2015.006.30094

Trust: 0.8

vendor:adobemodel:acrobatscope:ltversion:11.x (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobatscope:eqversion:xi desktop 11.0.13

Trust: 0.8

vendor:adobemodel:readerscope:ltversion:11.x (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat dcscope:eqversion:continuous 2015.009.20069

Trust: 0.8

vendor:adobemodel:acrobatscope:ltversion:10.x (windows/macintosh)

Trust: 0.8

vendor:adobemodel:readerscope:eqversion:xi desktop 11.0.13

Trust: 0.8

vendor:adobemodel:acrobatscope:eqversion:x desktop 10.1.16

Trust: 0.8

vendor:adobemodel:acrobat dcscope:eqversion:classic 2015.006.30094

Trust: 0.8

vendor:adobemodel:readerscope:ltversion:10.x (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:eqversion:continuous 2015.009.20069

Trust: 0.8

vendor:adobemodel:readerscope:eqversion:x desktop 10.1.16

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope: - version: -

Trust: 0.7

vendor:adobemodel:acrobat readerscope:eqversion:11.0.8

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:11.0.10

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:11.0.11

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:10.1.14

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:11.0.7

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:10.1.12

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:10.1.10

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:10.1.11

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:10.1.13

Trust: 0.6

vendor:adobemodel:acrobat readerscope:eqversion:11.0.12

Trust: 0.6

vendor:adobemodel:acrobatscope:eqversion:10.1.14

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.9

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.1

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.13

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:2015.8.20082

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.0

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.2

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:2015.006.30094

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.15

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:2015.6.30060

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.0.3

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.10

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.0.13

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobatscope:neversion:11.0.13

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:2015.006.30094

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.3

Trust: 0.3

vendor:adobemodel:acrobatscope:neversion:10.1.16

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.0.2

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.0.1

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.6

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.11

Trust: 0.3

vendor:adobemodel:readerscope:neversion:11.0.13

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.7

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.14

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.3

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.1

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1

Trust: 0.3

vendor:adobemodel:readerscope:neversion:10.1.16

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.0.2

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.5

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.0

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:2015.007.20033

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.12

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.1

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.2

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.13

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.8

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.11

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.0.3

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.2

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.9

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.7

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:2015.006.30060

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.05

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.10

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:2015.009.20069

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:2015.006.30033

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:10.1.12

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.1

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.9

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:2015.009.20069

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:2015.006.30033

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:2015.008.20082

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.7

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.0.1

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:2015.007.20033

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.09

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:10.1.15

Trust: 0.3

sources: ZDI: ZDI-15-534 // BID: 77404 // JVNDB: JVNDB-2015-005722 // CNNVD: CNNVD-201511-009 // NVD: CVE-2015-7650

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-7650
value: MEDIUM

Trust: 1.0

NVD: CVE-2015-7650
value: HIGH

Trust: 0.8

ZDI: CVE-2015-7650
value: MEDIUM

Trust: 0.7

CNNVD: CNNVD-201511-009
value: CRITICAL

Trust: 0.6

VULHUB: VHN-85611
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-7650
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.7

NVD: CVE-2015-7650
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-85611
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: ZDI: ZDI-15-534 // VULHUB: VHN-85611 // JVNDB: JVNDB-2015-005722 // CNNVD: CNNVD-201511-009 // NVD: CVE-2015-7650

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-85611 // JVNDB: JVNDB-2015-005722 // NVD: CVE-2015-7650

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201511-009

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201511-009

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-005722

PATCH

title:APSB15-24url:https://helpx.adobe.com/security/products/acrobat/apsb15-24.html

Trust: 1.5

title:APSB15-24url:https://helpx.adobe.com/jp/security/products/reader/apsb15-24.html

Trust: 0.8

title:アドビ システムズ社 Adobe Reader の脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/adobe/20151015.html

Trust: 0.8

title:Multiple Adobe Product Buffer Overflow Vulnerability Fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=58541

Trust: 0.6

sources: ZDI: ZDI-15-534 // JVNDB: JVNDB-2015-005722 // CNNVD: CNNVD-201511-009

EXTERNAL IDS

db:NVDid:CVE-2015-7650

Trust: 3.5

db:ZDIid:ZDI-15-534

Trust: 2.7

db:JVNDBid:JVNDB-2015-005722

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-3334

Trust: 0.7

db:CNNVDid:CNNVD-201511-009

Trust: 0.7

db:BIDid:77404

Trust: 0.4

db:VULHUBid:VHN-85611

Trust: 0.1

sources: ZDI: ZDI-15-534 // VULHUB: VHN-85611 // BID: 77404 // JVNDB: JVNDB-2015-005722 // CNNVD: CNNVD-201511-009 // NVD: CVE-2015-7650

REFERENCES

url:https://helpx.adobe.com/security/products/acrobat/apsb15-24.html

Trust: 2.7

url:http://www.zerodayinitiative.com/advisories/zdi-15-534

Trust: 1.7

url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7650

Trust: 0.8

url:http://www.ipa.go.jp/security/ciadr/vul/20151014-adobereader.html

Trust: 0.8

url:http://www.jpcert.or.jp/at/2015/at150035.html

Trust: 0.8

url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7650

Trust: 0.8

url:http://www.npa.go.jp/cyberpolice/topics/?seq=17022

Trust: 0.8

url:http://www.adobe.com

Trust: 0.3

url:http://www.zerodayinitiative.com/advisories/zdi-15-534/

Trust: 0.3

sources: ZDI: ZDI-15-534 // VULHUB: VHN-85611 // BID: 77404 // JVNDB: JVNDB-2015-005722 // CNNVD: CNNVD-201511-009 // NVD: CVE-2015-7650

CREDITS

kdot

Trust: 1.6

sources: ZDI: ZDI-15-534 // BID: 77404 // CNNVD: CNNVD-201511-009

SOURCES

db:ZDIid:ZDI-15-534
db:VULHUBid:VHN-85611
db:BIDid:77404
db:JVNDBid:JVNDB-2015-005722
db:CNNVDid:CNNVD-201511-009
db:NVDid:CVE-2015-7650

LAST UPDATE DATE

2024-11-23T23:05:37.693000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-15-534date:2015-11-02T00:00:00
db:VULHUBid:VHN-85611date:2020-05-18T00:00:00
db:BIDid:77404date:2015-11-02T00:00:00
db:JVNDBid:JVNDB-2015-005722date:2015-11-05T00:00:00
db:CNNVDid:CNNVD-201511-009date:2020-05-19T00:00:00
db:NVDid:CVE-2015-7650date:2024-11-21T02:37:08.880

SOURCES RELEASE DATE

db:ZDIid:ZDI-15-534date:2015-11-02T00:00:00
db:VULHUBid:VHN-85611date:2015-11-04T00:00:00
db:BIDid:77404date:2015-11-02T00:00:00
db:JVNDBid:JVNDB-2015-005722date:2015-11-05T00:00:00
db:CNNVDid:CNNVD-201511-009date:2015-11-03T00:00:00
db:NVDid:CVE-2015-7650date:2015-11-04T03:59:17.517