CVE-2014-9150: Race Condition

Q: What is the severity of CVE-2014-9150?

CVE-2014-9150 has a moderate severity rating due to its ability to bypass sandbox protections.

Q: How do I fix CVE-2014-9150?

To fix CVE-2014-9150, users should update Adobe Reader and Acrobat to version 11.0.09 or later.

Q: What software versions are affected by CVE-2014-9150?

CVE-2014-9150 affects Adobe Reader and Acrobat versions prior to 11.0.09 on Windows.

Q: Can CVE-2014-9150 lead to full system compromise?

While CVE-2014-9150 can allow arbitrary file writes, it does not automatically lead to full system compromise.

Q: What type of attack does CVE-2014-9150 involve?

CVE-2014-9150 involves an NTFS junction attack to exploit a race condition in MoveFileEx.

Published Nov 30, 2014

Updated

Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS junction attack, a similar issue to CVE-2014-0568.

Affected Software

19 affected components

Adobe Acrobat reader<=11.0.8

Adobe Acrobat reader=11.0

Adobe Acrobat reader=11.0.1

Adobe Acrobat reader=11.0.2

Adobe Acrobat reader=11.0.3

Adobe Acrobat reader=11.0.4

Adobe Acrobat Reader Windows=11.0.5

Adobe Acrobat reader=11.0.6

Adobe Acrobat reader=11.0.7

Microsoft Windows

Adobe Acrobat<=11.0.8

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

Adobe Acrobat=11.0.2

Adobe Acrobat=11.0.3

Adobe Acrobat=11.0.4

Adobe Acrobat Windows=11.0.5

Adobe Acrobat=11.0.6

Adobe Acrobat=11.0.7

Remediation

Patch Available

http://helpx.adobe.com/security/products/reader/apsb14-28.html

Event History

Nov 30, 2014

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-9150?

CVE-2014-9150 has a moderate severity rating due to its ability to bypass sandbox protections.

How do I fix CVE-2014-9150?