CVE-2015-5098: Buffer Overflow

Published Jul 15, 2015
·
Updated

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5096 and CVE-2015-5105.

Affected Software

10 affected components
Adobe Acrobat>=10.0<=10.1.14
Adobe Acrobat>=11.0.0<=11.0.11
Adobe Acrobat DC>=15.006.30033<15.006.30060
Adobe Acrobat DC>=15.007.20033<15.008.20082
Adobe Acrobat Reader>=10.0<=10.1.14
Adobe Acrobat Reader>=11.0.0<=11.0.11
Adobe Acrobat Reader DC>=15.006.30033<15.006.30060
Adobe Acrobat Reader DC>=15.007.20033<15.008.20082
Apple macOS
Microsoft Windows

Event History

Jul 15, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2015-5098?

The severity of CVE-2015-5098 is classified as critical due to its potential for arbitrary code execution.

2

How do I fix CVE-2015-5098?

To fix CVE-2015-5098, users should upgrade to the latest version of Adobe Reader or Acrobat as specified in the vendor's security advisory.

3

Which versions of Adobe software are affected by CVE-2015-5098?

CVE-2015-5098 affects Adobe Reader and Acrobat versions 10.x before 10.1.15, 11.x before 11.0.12, and various DC versions prior to specified updates.

4

What type of vulnerability is CVE-2015-5098?

CVE-2015-5098 is a heap-based buffer overflow vulnerability.

5

Can CVE-2015-5098 be exploited remotely?

Yes, CVE-2015-5098 can potentially be exploited remotely if a user opens a malicious PDF file.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203