KLA10807
Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Multiple use-after-free, heap buffer overflow, integer overflow and memory corruption vulnerabilities can be exploited to execute arbitrary code;
2. Memory leak vulnerability can be potentially exploited to cause denial of service;
3. An unknown vulnerability can be exploited remotely to obtain sensitive information;
4. An unknown vulnerabilities can be exploited to bypass Javascript API restrictions;
5. An insecure search path while updates resolve can be exploited to execute arbitrary code;
6. Memory corruption vulnerability can be exploited remotely to cause denial of service.

Adobe Acrobat XI versions earlier than 11.0.16
Adobe Acrobat Reader XI versions earlier than 11.0.16
Adobe Acrobat DC Classic versions earlier than 15.006.30172
Adobe Acrobat Reader DC Classic versions earlier than 15.006.30172
Adobe Acrobat DC Continuous versions earlier than 15.016.20039
Adobe Acrobat Reader DC Continuous versions earlier than 15.016.20039

Update to the latest version
Get reader

Adobe security bulletin