Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2014-9150

Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS junction attack, a similar issue to CVE-2014-0568.

  • Published: Nov 30, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-9150
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
adobe / acrobat_reader - 11.0.8.x
adobe / acrobat_reader 11.0 11.0.x
adobe / acrobat_reader 11.0.1 11.0.1.x
adobe / acrobat_reader 11.0.2 11.0.2.x
adobe / acrobat_reader 11.0.3 11.0.3.x
adobe / acrobat_reader 11.0.4 11.0.4.x
adobe / acrobat_reader 11.0.5 11.0.5.x
adobe / acrobat_reader 11.0.6 11.0.6.x
adobe / acrobat_reader 11.0.7 11.0.7.x
adobe / acrobat - 11.0.8.x
adobe / acrobat 11.0 11.0.x
adobe / acrobat 11.0.1 11.0.1.x
adobe / acrobat 11.0.2 11.0.2.x
adobe / acrobat 11.0.3 11.0.3.x
adobe / acrobat 11.0.4 11.0.4.x
adobe / acrobat 11.0.5 11.0.5.x
adobe / acrobat 11.0.6 11.0.6.x
adobe / acrobat 11.0.7 11.0.7.x