Vulnerability · NVD

CVE-2014-9150

CVE-2014-9150, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 2.3 %
Tracked apps: 2
Still exposed: 0

Published on 2014-11-30

Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS junction attack, a similar issue to CVE-2014-0568.

EPSS 2.27% above median percentile 82.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Adobe Acrobat Reader macOS brew:cask:adobe-acrobat-reader

Affected ≤11.0.8 Fixed in > 11.0.8 Latest tracked 26.001.21662 patched
Adobe Acrobat Reader (64-bit) Windows winget:Adobe.Acrobat.Reader.64-bit

Affected ≤11.0.8 Fixed in > 11.0.8 Latest tracked 26.002.21931 patched

Vulnerable CPE configurations (26)

Vendor	Product	Platform	Versions	CPE 2.3 URI
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≤11.0.8	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.1:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.2:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.3:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.4:::::::*
adobe	acrobat_reader Windows	Windows	-	cpe:2.3:a:adobe:acrobat_reader:11.0.5:-::::windows::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.6:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:11.0.7:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	≤11.0.8	cpe:2.3:a:adobe:acrobat::::::::
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	≤11.0.8	cpe:2.3:a:adobe:acrobat::::::::
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.1:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.1:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.2:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.2:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.3:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.3:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.4:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.4:::::::*
adobe	acrobat Windows	Windows	-	cpe:2.3:a:adobe:acrobat:11.0.5:-::::windows::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.6:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.6:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.7:::::::*
adobe	acrobat All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat:11.0.7:::::::*

View on NVD ↗ Advisory · helpx.adobe.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM