MEDIUM
Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."
Published Sep 17, 2014
4.3
MEDIUMCVSS 2.0
EPSS 2.46%
Description
Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."
Affected products
No data.
Configuration 1
AND
OR
- 10.0
- 10.0.1
- 10.0.2
- 10.0.3
- 10.1
- 10.1.1
- 10.1.2
- 10.1.3
- 10.1.4
- 10.1.5
- 10.1.6
- 10.1.7
- 10.1.8
- 10.1.9
- 10.1.10
- 10.1.11
- 11.0
- 11.0.1
- 11.0.2
- 11.0.3
- 11.0.4
- 11.0.5
- 11.0.6
- 11.0.7
- 11.0.8
Configuration 2
AND
OR
- 10.0
- 10.0
- 10.0.1
- 10.0.1
- 10.0.2
- 10.0.3
- 10.1
- 10.1.1
- 10.1.2
- 10.1.3
- 10.1.4
- 10.1.5
- 10.1.6
- 10.1.7
- 10.1.8
- 10.1.9
- 10.1.10
- 10.1.11
- 11.0
- 11.0.1
- 11.0.2
- 11.0.3
- 11.0.4
- 11.0.5
- 11.0.6
- 11.0.7
- 11.0.8
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://helpx.adobe.com/security/products/reader/apsb14-20.html x_refsource_CONFIRMPatchVendor Advisory
- http://www.securityfocus.com/bid/69822 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id/1030853 vdb-entryx_refsource_SECTRACK
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95997 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| http://helpx.adobe.com/security/products/reader/apsb14-20.html | x_refsource_CONFIRMPatchVendor Advisory | |
| http://www.securityfocus.com/bid/69822 | vdb-entryx_refsource_BID | |
| http://www.securitytracker.com/id/1030853 | vdb-entryx_refsource_SECTRACK | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95997 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Sep 17, 2014
Updated Aug 6, 2024
Reserved Dec 20, 2013
Link CVE-2014-0562
CISA Vulnrichment
Updated n/a