CVE ID | CVE-2015-5091 |
CVSS SCORE | 6.3, AV:L/AC:M/Au:N/C:N/I:C/A:C |
AFFECTED VENDORS |
Adobe |
AFFECTED PRODUCTS |
Reader |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of junction points in AdobeARM.exe. A local attacker running code as a normal user can set up a junction point in the ARM folder and then run a user control which will delete the contents of the folder. An attacker could use this to create a denial-of-service condition under the context of the SYSTEM user.
|
ADDITIONAL DETAILS |
Adobe has issued an update to correct this vulnerability. More details can be found at:
https://helpx.adobe.com/security/products/reader/apsb15-15.html |
DISCLOSURE TIMELINE |
|
CREDIT | AbdulAziz Hariri and Jasiel Spelman - HP Zero Day Initiative |