CVE-2015-7623: Medium severity adobe acrobat reader vulnerability
The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, and CVE-2015-7620.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7623?
The severity of CVE-2015-7623 is considered important due to its potential to allow attackers to bypass security controls.
How do I fix CVE-2015-7623?
To fix CVE-2015-7623, upgrade to Adobe Reader and Acrobat versions 10.1.16, 11.0.13, or later.
What software is affected by CVE-2015-7623?
CVE-2015-7623 affects Adobe Acrobat 10.x before 10.1.16, 11.x before 11.0.13, and various versions of Adobe Acrobat Reader on Windows and macOS.
Can CVE-2015-7623 be exploited remotely?
Yes, CVE-2015-7623 can potentially be exploited remotely by attackers.
Is my Adobe Acrobat DC vulnerable to CVE-2015-7623?
Yes, Adobe Acrobat DC Classic versions before 2015.006.30094 and Continuous versions before 2015.009.20069 are vulnerable to CVE-2015-7623.