CVE-2015-6699 — MEDIUM (4.3)

Q: How severe is CVE-2015-6699?

CVE-2015-6699 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2015-6699?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader, Adobe Acrobat Reader Dc, Apple Macos.

Vulnerability Description

The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerability than CVE-2015-6697, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Adobe	Acrobat	>= 10.0, <= 10.1.15
Adobe	Acrobat Dc	>= 15.006.30060, < 15.006.30094
Adobe	Acrobat Reader	>= 10.0, <= 10.1.15
Adobe	Acrobat Reader Dc	>= 15.006.30060, < 15.006.30094
Apple	Macos	-
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-772

References

http://www.securitytracker.com/id/1033796Third Party AdvisoryVDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-477Third Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb15-24.htmlPatchVendor Advisory
http://www.securitytracker.com/id/1033796Third Party AdvisoryVDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-477Third Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb15-24.htmlPatchVendor Advisory

FAQ

What is CVE-2015-6699?

CVE-2015-6699 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC...

How severe is CVE-2015-6699?

CVE-2015-6699 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-6699?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader, Adobe Acrobat Reader Dc, Apple Macos.