CVE-2014-9161

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-01-30 · updated 2026-06-17
Weakness: CWE-119

Description

CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.

Affected products

Adobe Acrobat for Edge: 10.0, 10.0.1, 10.0.2, 10.0.3, 10.1, 10.1.1 (+23)
Adobe Acrobat Reader: 10.1.13, 11.0.10, 10.0, 10.0.1, 10.0.2, 10.0.3 (+23)

References

http://code.google.com/p/google-security-research/issues/detail?id=149
http://packetstormsecurity.com/files/134394/Adobe-Reader-X-XI-Out-Of-Bounds-Read.html
http://www.securityfocus.com/bid/74600
http://www.securitytracker.com/id/1032284
https://helpx.adobe.com/security/products/reader/apsb15-10.html
http://code.google.com/p/google-security-research/issues/detail?id=149
http://packetstormsecurity.com/files/134394/Adobe-Reader-X-XI-Out-Of-Bounds-Read.html
http://www.securityfocus.com/bid/74600
http://www.securitytracker.com/id/1032284
https://helpx.adobe.com/security/products/reader/apsb15-10.html

Get alerted when CVE-2014-9161 or the next vulnerability affects your stack