Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. Memory address leak vulnerability can be exploited to obtain sensitive information.
2. Out of bounds read  vulnerability can be exploited to obtain sensitive information.
3. Out of bounds write vulnerability can be exploited to execute arbitrary code.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer overflow vulnerability can be exploited to execute arbitrary code.
6. Memory corruption vulnerability can be exploited to execute arbitrary code.
7. Insecure library loading (DLL hijacking) vulnerability can be exploited to gain privileges.
8. Stack-based buffer overflow vulnerability can be exploited to execute arbitrary code.

Original advisories

• APSB20-13

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

CVE list

• CVE-2020-3800
  warning
• CVE-2020-3804
  warning
• CVE-2020-3795
  critical
• CVE-2020-3793
  critical
• CVE-2020-3792
  critical
• CVE-2020-3805
  critical
• CVE-2020-3807
  critical
• CVE-2020-3801
  critical
• CVE-2020-3797
  critical
• CVE-2020-3802
  high
• CVE-2020-3803
  warning
• CVE-2020-3799
  critical
• CVE-2020-3806
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com