The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Information
Published : 2014-09-17 03:55
Updated : 2017-08-28 18:34
NVD link : CVE-2014-0568
Mitre link : CVE-2014-0568
JSON object : View
CWE
Products Affected
microsoft
- windows
adobe
- acrobat_reader
- acrobat