← Back

CVE-2014-0568

nvd nist
Published: Sep 17, 2014Modified: May 6, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.

Affected (52)

2 products
Acrobat Reader
Acrobat
Configuration A
25 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Version 10.0.1
Version 10.0.2
Version 10.0.3
Version 10.0
Version 10.1.10
Version 10.1.11
Version 10.1.1
Version 10.1.2
Version 10.1.3
Version 10.1.4
Version 10.1.5
Version 10.1.6
Version 10.1.7
Version 10.1.8
Version 10.1.9
Version 10.1
Version 11.0.1
Version 11.0.2
Version 11.0.3
Version 11.0.4
Version 11.0.5
Version 11.0.6
Version 11.0.7
Version 11.0.8
Version 11.0
Configuration B
27 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Version 10.0.1
Version 10.0.1
Version 10.0.2
Version 10.0.3
Version 10.0
Version 10.0
Version 10.1.10
Version 10.1.11
Version 10.1.1
Version 10.1.2
Version 10.1.3
Version 10.1.4
Version 10.1.5
Version 10.1.6
Version 10.1.7
Version 10.1.8
Version 10.1.9
Version 10.1
Version 11.0.1
Version 11.0.2
Version 11.0.3
Version 11.0.4
Version 11.0.5
Version 11.0.6
Version 11.0.7
Version 11.0.8
Version 11.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

References (10)

Source: psirt@adobe.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.