CVE-2015-4449: Infoleak
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2014-8450, CVE-2015-4450, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4449?
CVE-2015-4449 has a critical severity rating due to its ability to allow unauthorized access to sensitive information.
How do I fix CVE-2015-4449?
To fix CVE-2015-4449, update Adobe Reader and Acrobat to the latest versions, specifically to 10.1.15 or later for version 10.x and 11.0.12 or later for version 11.x.
Which versions are affected by CVE-2015-4449?
CVE-2015-4449 affects Adobe Reader and Acrobat versions prior to 10.1.15, 11.0.12, and several versions of Acrobat DC Classic and Continuous prior to 2015.006.30060 and 2015.008.20082, respectively.
What types of attacks are possible with CVE-2015-4449?
CVE-2015-4449 can be exploited to bypass access restrictions, enabling attackers to extract sensitive information from the affected software.
Are there any mitigations for CVE-2015-4449?
While the best mitigation for CVE-2015-4449 is to apply updates, users can also limit exposure by using alternative PDF viewers that are not affected by this vulnerability.