A hotfix released by Adobe on Tuesday addresses a vulnerability (CVE-2015-3269) in LiveCycle Data Services that could lead to information being disclosed.
The updated versions are 4.7.0.354169, 4.6.2.354169, 4.5.1.354169, and 3.0.0.354170 for Windows, Macintosh and Unix. Adobe rates the fix as a priority 3 update, which means the company recommends administrators install the update at their discretion. Priority 1 and 2 rated patches require faster action.
The vulnerability is associated with parsing crafted XML entities, which could lead to information being disclosed, Adobe said on its site.
“We are not currently aware of any reports of this vulnerability being exploited,” Adobe spokesperson Erika Strong told SCMagazine.com Tuesday in an email correspondence. “This issue was responsibly disclosed to Adobe.”
Adobe credited Matthias Kaiser of Code White for bringing the issue to the company's attention.
