Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. Memory address leak vulnerability can be exploited to obtain sensitive information.
2. Out of bounds read  vulnerability can be exploited to obtain sensitive information.
3. Out of bounds write vulnerability can be exploited to execute arbitrary code.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer overflow vulnerability can be exploited to execute arbitrary code.
6. Memory corruption vulnerability can be exploited to execute arbitrary code.
7. Insecure library loading (DLL hijacking) vulnerability can be exploited to gain privileges.
8. Stack-based buffer overflow vulnerability can be exploited to execute arbitrary code.

Original advisories

• APSB20-13

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

CVE list

• CVE-2020-3800
  critical
• CVE-2020-3804
  critical
• CVE-2020-3795
  critical
• CVE-2020-3793
  critical
• CVE-2020-3792
  critical
• CVE-2020-3805
  critical
• CVE-2020-3807
  critical
• CVE-2020-3801
  critical
• CVE-2020-3797
  critical
• CVE-2020-3802
  critical
• CVE-2020-3803
  critical
• CVE-2020-3799
  critical
• CVE-2020-3806
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com