XML External Entity (XXE) Vulnerability in Adobe Reader and Acrobat

CVE-2014-8452 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Learn more about our External Network Penetration Testing.