CVE-2014-0568 The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and cons...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe Acrobat Reader | = 10.0.1 | No fix listed |
| Adobe Acrobat Reader | = 10.0.2 | No fix listed |
| Adobe Acrobat Reader | = 10.0.3 | No fix listed |
| Adobe Acrobat Reader | = 10.1 | No fix listed |
| Adobe Acrobat Reader | = 10.1.1 | No fix listed |
| Adobe Acrobat Reader | = 10.1.2 | No fix listed |
| Adobe Acrobat Reader | = 10.1.3 | No fix listed |
| Adobe Acrobat Reader | = 10.1.4 | No fix listed |
| Adobe Acrobat Reader | = 10.1.5 | No fix listed |
| Adobe Acrobat Reader | = 10.1.6 | No fix listed |
| Adobe Acrobat Reader | = 10.1.7 | No fix listed |
| Adobe Acrobat Reader | = 10.1.8 | No fix listed |
| Adobe Acrobat Reader | = 10.1.9 | No fix listed |
| Adobe Acrobat Reader | = 10.1.10 | No fix listed |
| Adobe Acrobat Reader | = 10.1.11 | No fix listed |
| Adobe Acrobat Reader | = 11.0 | No fix listed |
| Adobe Acrobat Reader | = 11.0.1 | No fix listed |
| Adobe Acrobat Reader | = 11.0.2 | No fix listed |
| Adobe Acrobat Reader | = 11.0.3 | No fix listed |
| Adobe Acrobat Reader | = 11.0.4 | No fix listed |
| Adobe Acrobat Reader | = 11.0.5 | No fix listed |
| Adobe Acrobat Reader | = 11.0.6 | No fix listed |
| Adobe Acrobat Reader | = 11.0.7 | No fix listed |
| Adobe Acrobat Reader | = 11.0.8 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 10.0 | No fix listed |
| Adobe acrobat | = 10.0.1 | No fix listed |
| Adobe acrobat | = 10.0.2 | No fix listed |
| Adobe acrobat | = 10.0.3 | No fix listed |
| Adobe acrobat | = 10.1 | No fix listed |
| Adobe acrobat | = 10.1.1 | No fix listed |
| Adobe acrobat | = 10.1.2 | No fix listed |
| Adobe acrobat | = 10.1.3 | No fix listed |
| Adobe acrobat | = 10.1.4 | No fix listed |
| Adobe acrobat | = 10.1.5 | No fix listed |
| Adobe acrobat | = 10.1.6 | No fix listed |
| Adobe acrobat | = 10.1.7 | No fix listed |
| Adobe acrobat | = 10.1.8 | No fix listed |
| Adobe acrobat | = 10.1.9 | No fix listed |
| Adobe acrobat | = 10.1.10 | No fix listed |
| Adobe acrobat | = 10.1.11 | No fix listed |
| Adobe acrobat | = 11.0 | No fix listed |
| Adobe acrobat | = 11.0.1 | No fix listed |
| Adobe acrobat | = 11.0.2 | No fix listed |
| Adobe acrobat | = 11.0.3 | No fix listed |
| Adobe acrobat | = 11.0.4 | No fix listed |
| Adobe acrobat | = 11.0.5 | No fix listed |
| Adobe acrobat | = 11.0.6 | No fix listed |
| Adobe acrobat | = 11.0.7 | No fix listed |
| Adobe acrobat | = 11.0.8 | No fix listed |
References
- helpx.adobe.com patch vendor-advisory
- 69828 vdb-entry
- 1030853 vdb-entry
- code.google.com
- adobe-reader-cve20140568-sec-bypass(96000) vdb-entry