CVE-2015-6697

MEDIUM Year: 2015
CVSS v2 Score
6.8
Medium
Weakness Type
CWE-772
View all →

Vulnerability Description

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to obtain sensitive information about color objects from process memory by reading a light object's RGB data, a different vulnerability than CVE-2015-6699, CVE-2015-6700, CVE-2015-6701, CVE-2015-6702, CVE-2015-6703, and CVE-2015-6704.

Related Vulnerabilities

CVE-2017-11641

CRITICAL
CVSS:9.8(Critical)

GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files.

CWE-7722017

CVE-2017-14138

CRITICAL
CVSS:9.8(Critical)

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

CWE-7722017

CVE-2017-15032

CRITICAL
CVSS:9.8(Critical)

ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

CWE-7722017

CVE-2020-12134

CRITICAL
CVSS:9.8(Critical)

Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log.

CWE-7722020

CVE-2017-11170

HIGH
CVSS:8.8(High)

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.

CWE-7722017

CVE-2017-11310

HIGH
CVSS:8.8(High)

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

CWE-7722017