Most recent entries from all

bdu:2015-11798

cnvd-2015-06759

fkie_cve-2015-7829

GHSA-5p5f-7qvc-xw5j

gsd-2015-7829

VAR-201510-0402

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows mishandle junctions in the Synchronizer directory, which allows attackers to delete arbitrary files via Adobe Collaboration Sync, a related issue to CVE-2015-2428. This vulnerability CVE-2015-3095 , CVE-2015-5087 , CVE-2015-5094 , CVE-2015-5100 , CVE-2015-5102 , CVE-2015-5103 ,and CVE-2015-5104 Is a different vulnerability.By the attacker, Adobe Collaboration Sync Any file may be deleted through. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of junction points. An attacker running code in the context of a sandboxed Adobe Reader process can set up a junction point in the Synchronizer folder and then run Adobe Collaboration Sync which will delete the contents of the folder. This may lead to further attacks. Adobe Reader, etc. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF