CVE-2014-0568

Publicada em 17 set 2014 · Atualizada em 06 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.1%

The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.

Produtos afetados

n/a · n/a

Referências

http://helpx.adobe.com/security/products/reader/apsb14-20.html https://code.google.com/p/google-security-research/issues/detail?id=94 https://exchange.xforce.ibmcloud.com/vulnerabilities/96000 http://www.securityfocus.com/bid/69828 http://www.securitytracker.com/id/1030853