CVE-2014-9160: Buffer Overflow
Published May 13, 2015
·Updated
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code via unknown vectors.
Affected Software
52 affected components
Adobe Acrobat Reader=10.1.0
Adobe Acrobat Reader=10.1.1
Adobe Acrobat Reader=10.1.2
Adobe Acrobat Reader=10.1.3
Adobe Acrobat Reader=10.1.4
Adobe Acrobat Reader=10.1.5
Adobe Acrobat Reader=10.1.6
Adobe Acrobat Reader=10.1.7
Adobe Acrobat Reader=10.1.8
Adobe Acrobat Reader=10.1.9
Adobe Acrobat Reader=10.1.10
Adobe Acrobat Reader=10.1.11
Adobe Acrobat Reader=10.1.12
Adobe Acrobat Reader=10.1.13
Adobe Acrobat Reader=11.0.0
Adobe Acrobat Reader=11.0.1
Adobe Acrobat Reader=11.0.2
Adobe Acrobat Reader=11.0.3
Adobe Acrobat Reader=11.0.4
Adobe Acrobat Reader=11.0.5
Adobe Acrobat Reader=11.0.6
Adobe Acrobat Reader=11.0.7
Adobe Acrobat Reader=11.0.8
Adobe Acrobat Reader=11.0.9
Adobe Acrobat Reader=11.0.10
Apple iOS and macOS
Microsoft Windows
Adobe Acrobat=10.1.0
Adobe Acrobat=10.1.1
Adobe Acrobat=10.1.2
Adobe Acrobat=10.1.3
Adobe Acrobat=10.1.4
Adobe Acrobat=10.1.5
Adobe Acrobat=10.1.6
Adobe Acrobat=10.1.7
Adobe Acrobat=10.1.8
Adobe Acrobat=10.1.9
Adobe Acrobat=10.1.10
Adobe Acrobat=10.1.11
Adobe Acrobat=10.1.12
Adobe Acrobat=10.1.13
Adobe Acrobat=11.0.0
Adobe Acrobat=11.0.1
Adobe Acrobat=11.0.2
Adobe Acrobat=11.0.3
Adobe Acrobat=11.0.4
Adobe Acrobat=11.0.5
Adobe Acrobat=11.0.6
Adobe Acrobat=11.0.7
Adobe Acrobat=11.0.8
Adobe Acrobat=11.0.9
Adobe Acrobat=11.0.10
Remediation
Event History
May 13, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9160?
CVE-2014-9160 is considered critical due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2014-9160?
To fix CVE-2014-9160, update Adobe Acrobat Reader or Acrobat to the latest version.
3
Which versions are affected by CVE-2014-9160?
CVE-2014-9160 affects Adobe Reader and Acrobat versions before 10.1.14 and 11.0.11.
4
What type of vulnerability is CVE-2014-9160?
CVE-2014-9160 is a heap-based buffer overflow vulnerability.
5
What platforms are impacted by CVE-2014-9160?
CVE-2014-9160 impacts both Windows and macOS versions of Adobe Acrobat and Reader.