CVE-2014-0565: Buffer Overflow

Published Sep 17, 2014

Updated

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0566.

Affected Software

54 affected components

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat=10.1.5

Adobe Acrobat=10.1.6

Adobe Acrobat=10.1.7

Adobe Acrobat=10.1.8

Adobe Acrobat=10.1.9

Adobe Acrobat=10.1.10

Adobe Acrobat=10.1.11

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

Adobe Acrobat=11.0.2

Adobe Acrobat=11.0.3

Adobe Acrobat=11.0.4

Adobe Acrobat Windows=11.0.5

Adobe Acrobat=11.0.6

Adobe Acrobat=11.0.7

Adobe Acrobat=11.0.8

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat reader=10.1.5

Adobe Acrobat reader=10.1.6

Adobe Acrobat reader=10.1.7

Adobe Acrobat reader=10.1.8

Adobe Acrobat reader=10.1.9

Adobe Acrobat reader=10.1.10

Adobe Acrobat reader=10.1.11

Adobe Acrobat reader=11.0

Adobe Acrobat reader=11.0.1

Adobe Acrobat reader=11.0.2

Adobe Acrobat reader=11.0.3

Adobe Acrobat reader=11.0.4

Adobe Acrobat Reader Windows=11.0.5

Adobe Acrobat reader=11.0.6

Adobe Acrobat reader=11.0.7

Adobe Acrobat reader=11.0.8

Remediation

Patch Available

http://helpx.adobe.com/security/products/reader/apsb14-20.html

Event History

Sep 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-0565?

CVE-2014-0565 has been classified with a critical severity level due to its potential to allow remote code execution.

How do I fix CVE-2014-0565?

To fix CVE-2014-0565, update Adobe Reader and Acrobat to the latest version available, specifically version 10.1.12 or 11.0.09 and above.

What versions of Adobe Reader are affected by CVE-2014-0565?

CVE-2014-0565 affects Adobe Reader and Acrobat versions prior to 10.1.12 and 11.0.09.

Can CVE-2014-0565 lead to a denial of service?

Yes, CVE-2014-0565 can potentially lead to a denial of service through memory corruption.

What types of systems are vulnerable to CVE-2014-0565?

CVE-2014-0565 primarily affects Windows and OS X systems running the vulnerable versions of Adobe Reader and Acrobat.