Adobe Acrobat

ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2

ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2

Adobe Acrobat Pro DC Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader | Stack-based Buffer Overflow (CWE-121)

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

T5 Acrobat Vulnerability - Exploitable crash in DecodeTile

Acrobat Reader | Integer Overflow or Wraparound (CWE-190)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Acrobat Reader | Double Free (CWE-415)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation

Acrobat Reader | Uncontrolled Search Path Element (CWE-427)

Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors, a different vulnerability than CVE-2016-1092.

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3053, CVE-2015-3054, CVE-2015-3059, and CVE-2015-3075.

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.

The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623.

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.