CVE-2015-3073 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 25.5% (pctl 98)
Patch early
A public exploit exists.
Description
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, and CVE-2015-3074.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 25.47% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-284 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2015-05-13 |
| Last modified | 2026-06-17 |
Affected (4)
| Vendor | Product |
|---|---|
| adobe | acrobat |
| adobe | acrobat reader |
| apple | mac os x |
| microsoft | windows |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Adobe Acrobat Reader - AFParseDate JavaScript API Restrictions Bypass | 2015-09-28 |
References
- http://www.securityfocus.com/bid/74604
- http://www.securitytracker.com/id/1032284
- http://www.zerodayinitiative.com/advisories/ZDI-15-197
- https://helpx.adobe.com/security/products/reader/apsb15-10.html
- https://www.exploit-db.com/exploits/38344/
- http://www.securityfocus.com/bid/74604
- http://www.securitytracker.com/id/1032284
- http://www.zerodayinitiative.com/advisories/ZDI-15-197
- https://helpx.adobe.com/security/products/reader/apsb15-10.html
- https://www.exploit-db.com/exploits/38344/
→ the Explorer · watch your stack · NVD