| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | = 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5= 11.0.6= 11.0.7= 11.0.8 | |
| acrobat reader | = 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5= 11.0.6= 11.0.7= 11.0.8 |
The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free