Signature Detail

HTTP: Adobe Acrobat and Reader CVE-2014-0493 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat and Reader. A successful attack can lead to arbitrary code execution.

Extended Description

Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495.

Affected Products

• adobe acrobat 10.1
• adobe acrobat 10.1.1
• adobe acrobat 10.1.2
• adobe acrobat 10.1.3
• adobe acrobat 10.1.4
• adobe acrobat 10.1.5
• adobe acrobat 10.1.6
• adobe acrobat 10.1.7
• adobe acrobat 11.0
• adobe acrobat 11.0.1
• adobe acrobat 11.0.2
• adobe acrobat 11.0.3
• adobe acrobat 11.0.4
• adobe acrobat up to 10.1.8
• adobe acrobat up to 11.0.5
• adobe acrobat_reader 10.1
• adobe acrobat_reader 10.1.1
• adobe acrobat_reader 10.1.2
• adobe acrobat_reader 10.1.3
• adobe acrobat_reader 10.1.4
• adobe acrobat_reader 10.1.5
• adobe acrobat_reader 10.1.6
• adobe acrobat_reader 10.1.7
• adobe acrobat_reader 11.0
• adobe acrobat_reader 11.0.1
• adobe acrobat_reader 11.0.2
• adobe acrobat_reader 11.0.3
• adobe acrobat_reader 11.0.4
• adobe acrobat_reader up to 10.1.8

References

• BugTraq: 64802
• CVE: CVE-2014-0493