CVE-2015-4450: Infoleak
First published: Wed Jul 15 2015(Updated: )
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2014-8450, CVE-2015-4449, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=10.0<10.1.15 | |
| Adobe Acrobat Reader | >=11.0.0<11.0.12 | |
| Adobe Acrobat Reader DC | >=15.006.30033<15.006.30060 | |
| Adobe Acrobat Reader DC | >=15.007.20033<15.008.20082 | |
| Adobe Acrobat Reader Notification Manager | >=10.0<10.1.15 | |
| Adobe Acrobat Reader Notification Manager | >=11.0.0<11.0.12 | |
| Adobe Acrobat Reader | >=15.006.30033<15.006.30060 | |
| Adobe Acrobat Reader | >=15.007.20033<15.008.20082 | |
| macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-4450?
CVE-2015-4450 has a critical severity rating due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2015-4450?
To fix CVE-2015-4450, users should update Adobe Reader and Acrobat to the latest versions immediately.
Which versions of Adobe Reader are affected by CVE-2015-4450?
CVE-2015-4450 affects Adobe Reader 10.x before 10.1.15, 11.x before 11.0.12, and various versions of Acrobat and Acrobat Reader DC.
What types of attacks does CVE-2015-4450 enable?
CVE-2015-4450 enables attackers to bypass access restrictions and potentially retrieve sensitive information from affected Adobe products.
Is CVE-2015-4450 applicable on macOS?
Yes, CVE-2015-4450 affects Adobe Acrobat and Reader versions on macOS as well as Windows.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/10.0
- version/adobe acrobat reader/11.0.0
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.006.30033
- version/adobe acrobat reader dc/15.007.20033
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/10.0
- version/adobe acrobat reader notification manager/11.0.0
- version/adobe acrobat reader/15.006.30033
- version/adobe acrobat reader/15.007.20033
- vendor/apple
- canonical/macos
- vendor/microsoft
- canonical/microsoft windows operating system