CVE-2015-4449: Infoleak
First published: Wed Jul 15 2015(Updated: )
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2014-8450, CVE-2015-4450, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=10.0<=10.1.14 | |
| Adobe Acrobat Reader | >=11.0.0<=11.0.11 | |
| Adobe Acrobat | >=15.006.30033<15.006.30060 | |
| Adobe Acrobat | >=15.007.20033<15.008.20082 | |
| Adobe Acrobat Reader | >=10.0<=10.1.14 | |
| Adobe Acrobat Reader | >=11.0.0<=11.0.11 | |
| Adobe Acrobat Reader | >=15.006.30033<15.006.30060 | |
| Adobe Acrobat Reader | >=15.007.20033<15.008.20082 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-4449?
CVE-2015-4449 has a critical severity rating due to its ability to allow unauthorized access to sensitive information.
How do I fix CVE-2015-4449?
To fix CVE-2015-4449, update Adobe Reader and Acrobat to the latest versions, specifically to 10.1.15 or later for version 10.x and 11.0.12 or later for version 11.x.
Which versions are affected by CVE-2015-4449?
CVE-2015-4449 affects Adobe Reader and Acrobat versions prior to 10.1.15, 11.0.12, and several versions of Acrobat DC Classic and Continuous prior to 2015.006.30060 and 2015.008.20082, respectively.
What types of attacks are possible with CVE-2015-4449?
CVE-2015-4449 can be exploited to bypass access restrictions, enabling attackers to extract sensitive information from the affected software.
Are there any mitigations for CVE-2015-4449?
While the best mitigation for CVE-2015-4449 is to apply updates, users can also limit exposure by using alternative PDF viewers that are not affected by this vulnerability.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/10.0
- version/adobe acrobat reader/10.1.14
- version/adobe acrobat reader/11.0.0
- version/adobe acrobat reader/11.0.11
- canonical/adobe acrobat
- version/adobe acrobat/15.006.30033
- version/adobe acrobat/15.007.20033
- version/adobe acrobat reader/15.006.30033
- version/adobe acrobat reader/15.007.20033
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows