Description
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
No history.
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2024-08-06T13:18:48.345Z
Reserved: 2014-10-22T00:00:00.000Z
Link: CVE-2014-8452
No data.
Status : Modified
Published: 2014-12-10T21:59:23.493
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-8452
No data.
OpenCVE Enrichment
No data.
Weaknesses