Adobe Security Bulletin

Release date: April 14, 2014

Vulnerability identifier: APSB14-12

Priority: See table below

CVE Numbers: CVE-2014-0514

Platform: Android

Summary

Adobe has released a security update for Adobe Reader Mobile for the Android operating system. This update addresses a vulnerability that could be exploited to gain remote code execution on the affected system. Adobe recommends users update their product installations using the instructions provided in the “Solution” section below.

Affected software versions

• Adobe Reader Mobile 11.1.3 and earlier for Android
  

Solution

Adobe recommends users of Adobe Reader Mobile update to the newest version, available here: https://play.google.com/store/apps/details?id=com.adobe.reader.

Priority and severity ratings

Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:

This update addresses a critical vulnerability in the software.

Details

Adobe has released a security update for Adobe Reader Mobile for the Android operating system. This update addresses a vulnerability that could be exploited to gain remote code execution on the affected system. Adobe recommends users update their product installations using the instructions provided in the “Solution” section above.

This update resolves a vulnerability in the implementation of Javascript APIs that could be exploited to execute arbitrary code (CVE-2014-0514).

Acknowledgements

Adobe would like to thank Yorick Koster of Securify BV (CVE-2014-0514) for reporting this issue and for working with Adobe to help protect our customers.