HTTP: Adobe Reader CVE-2014-9150 Security Bypass
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can bypass local security policies enforced by the vulnerable application.
Extended Description
Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS junction attack, a similar issue to CVE-2014-0568.
References
CVE: CVE-2014-9150
Short Name
HTTP:STC:ADOBE:CVE-2014-9150-SB
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Adobe Bypass CVE-2014-9150 Reader Security
Release Date
12/15/2014
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
CVSS Score
6.4