CVE-2014-0562: XSS

Published Sep 17, 2014

Updated

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."

Affected Software

54 affected components

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat reader=10.1.5

Adobe Acrobat reader=10.1.6

Adobe Acrobat reader=10.1.7

Adobe Acrobat reader=10.1.8

Adobe Acrobat reader=10.1.9

Adobe Acrobat reader=10.1.10

Adobe Acrobat reader=10.1.11

Adobe Acrobat reader=11.0

Adobe Acrobat reader=11.0.1

Adobe Acrobat reader=11.0.2

Adobe Acrobat reader=11.0.3

Adobe Acrobat reader=11.0.4

Adobe Acrobat Reader Windows=11.0.5

Adobe Acrobat reader=11.0.6

Adobe Acrobat reader=11.0.7

Adobe Acrobat reader=11.0.8

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat=10.1.5

Adobe Acrobat=10.1.6

Adobe Acrobat=10.1.7

Adobe Acrobat=10.1.8

Adobe Acrobat=10.1.9

Adobe Acrobat=10.1.10

Adobe Acrobat=10.1.11

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

Adobe Acrobat=11.0.2

Adobe Acrobat=11.0.3

Adobe Acrobat=11.0.4

Adobe Acrobat Windows=11.0.5

Adobe Acrobat=11.0.6

Adobe Acrobat=11.0.7

Adobe Acrobat=11.0.8

Remediation

Patch Available

http://helpx.adobe.com/security/products/reader/apsb14-20.html

Event History

Sep 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-0562?

CVE-2014-0562 has a severity rating that indicates it allows remote attackers to inject arbitrary web script or HTML into affected Adobe Reader and Acrobat versions.

How do I fix CVE-2014-0562?

To fix CVE-2014-0562, update Adobe Reader and Acrobat to version 10.1.12 or 11.0.09 or later.

What versions of Adobe Reader are affected by CVE-2014-0562?

CVE-2014-0562 affects Adobe Reader versions 10.x before 10.1.12 and 11.x before 11.0.09 on OS X.

What types of attacks can CVE-2014-0562 enable?

CVE-2014-0562 can enable cross-site scripting (XSS) attacks through the injection of malicious scripts.

Is my system vulnerable to CVE-2014-0562 if I use an up-to-date version of Adobe Reader?

If you are using an up-to-date version of Adobe Reader or Acrobat, you are not vulnerable to CVE-2014-0562.