CRITICAL: CVE-2014-0512 (CVSS 10) — adobe acrobat reader

CVE: CVE-2014-0512

CVSS: 10 (2.0) — AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: CRITICAL

Status: Critical advisory

Affected

• adobe acrobat reader

Summary

Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE

References

• http://helpx.adobe.com/security/products/reader/apsb14-15.html
• http://twitter.com/thezdi/statuses/443827076580122624
• http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/
• http://helpx.adobe.com/security/products/reader/apsb14-15.html
• http://twitter.com/thezdi/statuses/443827076580122624
• http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._