First published: Wed Jul 15 2015(Updated: )
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3095, CVE-2015-5087, CVE-2015-5094, CVE-2015-5100, CVE-2015-5103, CVE-2015-5104, and CVE-2015-5115.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | >=10.0<10.1.15 | |
Adobe Acrobat Reader | >=11.0.0<11.0.12 | |
Adobe Acrobat DC | >=15.006.30033<15.006.30060 | |
Adobe Acrobat DC | >=15.007.20033<15.008.20082 | |
Adobe Acrobat Reader | >=10.0<10.1.15 | |
Adobe Acrobat Reader | >=11.0.0<11.0.12 | |
Adobe Acrobat DC | >=15.006.30033<15.006.30060 | |
Adobe Acrobat DC | >=15.007.20033<15.008.20082 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-5102 is considered critical due to the potential for arbitrary code execution and denial of service.
To fix CVE-2015-5102, Adobe recommends updating to version 10.1.15 or later for Adobe Reader and Acrobat 11.0.12 or later for the corresponding versions.
CVE-2015-5102 affects Adobe Reader and Acrobat 10.x before 10.1.15, 11.x before 11.0.12, and various versions of Acrobat and Acrobat Reader DC.
CVE-2015-5102 is a remote code execution vulnerability found in Adobe Reader and Acrobat.
Yes, CVE-2015-5102 can potentially lead to data loss as it allows attackers to execute arbitrary code on the affected systems.