Intrusion PreventionAdobe.Acrobat.Privileged.Context.Policy.Bypass
Description
This indicates an attack attempt to exploit a policy Bypass vulnerability in Adobe Reader and Acrobat.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted PDF file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted PDF file.
Affected Products
Adobe Reader XI (11.0.09) and earlier 11.x versions
Adobe Reader X (10.1.12) and earlier 10.x versions
Adobe Acrobat XI (11.0.09) and earlier 11.x versions
Adobe Acrobat X (10.1.12) and earlier 10.x versions
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://helpx.adobe.com/security/products/reader/apsb14-28.html
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-06-24 | 28.813 |
Modified
|
Name:Adobe. Reader. Privileged. Context. Policy. Bypass:Adobe. Acrobat. Privileged. Context. Policy. Bypass |
| ID | 39773 |
| Created | Dec 12, 2014 |
| Updated | Jun 21, 2024 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 19.04% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, MacOS |
| Affected App | Adobe |
| Profile Type | Permission/Privilege/Access Control |