CVE-2014-0514
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of...
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
Exploit likelihood
What each source reports
NVD Score used
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
- Record
CVE-2014-0514- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
- Record
CVE-2014-0514- Updated
- 2026-11-02
EUVDEUVD-2014-0545 No score
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
- Record
EUVD-2014-0545- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qppx-xpxc-rvg5 No score
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of...
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
- Record
GHSA-qppx-xpxc-rvg5- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Adobe Reader for Android 11.1.3 - Arbitrary JavaScript Execution | 2014-04-15 |
| Exploit-DB | Adobe Reader for Android < 11.2.0 - 'addJavascriptInterface' Local Overflow (Metasploit) | 2014-06-17 |
| Metasploit | Adobe Reader for Android addJavascriptInterface Exploit | 2014-04-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0514 is a high vulnerability (CVSS 9.3) in Adobe Reader, published April 15, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.1%, the 99th percentile. No source names a fixed version.