CVE ID | CVE-2014-0561 |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Adobe |
AFFECTED PRODUCTS |
Reader |
VULNERABILITY DETAILS |
The specific flaw exists within the 3DIF Plugin (3difr.x3d). By providing a crafted PDF, an attacker is able to overflow a heap buffer allocated by the 3DIF plugin, and could use this vulnerability to execute arbitrary code in the context of the viewing process. |
ADDITIONAL DETAILS |
Adobe has issued an update to correct this vulnerability. More details can be found at:
http://t.info.adobesystems.com//r/?id=t35c7e2bc,808fe4f,83a379a |
DISCLOSURE TIMELINE |
|
CREDIT | Tom Ferris - Security-Protocols.com |