CVE-2015-6707 describes a vulnerability in Adobe Reader and Acrobat versions 10.x and 11.x, as well as Acrobat and Acrobat Reader DC Classic and Continuous editions on Windows and OS X. This flaw, residing in the ANSendForReview method, allows attackers to bypass JavaScript API execution restrictions through unspecified vectors. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely over the network with medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code or Metasploit modules are available. The vulnerability has received minimal community discussion or media coverage, suggesting it is not widely known or actively targeted.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 10.0, <= 10.1.15CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
>= 11.0.0, <= 11.0.12CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
>= 15.006.30060, < 15.006.30094CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 15.008.20082, < 15.009.20069CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 10.0, <= 10.1.15CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.