Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Memory access vulnerability can be exploited to obtain sensitive information.
2. Race condition vulnerability can be exploited to bypass security restrictions.
3. Security vulnerability can be exploited to bypass security restrictions.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer vulnerability can be exploited to execute arbitrary code.
6. Out of bound read vulnerability can be exploited to obtain sensitive information.
7. Stack exhaustion vulnerability can be exploited to cause denial of service.
8. Out of bounds write vulnerability can be exploited to execute arbitrary code.
9. Null pointer vulnerability can be exploited to cause denial of service.
10. Heap overflow vulnerability can be exploited to execute arbitrary code.

Original advisories

• APSB20-24

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

CVE list

• CVE-2020-9598
  high
• CVE-2020-9593
  high
• CVE-2020-9615
  high
• CVE-2020-9613
  critical
• CVE-2020-9607
  critical
• CVE-2020-9595
  high
• CVE-2020-9604
  critical
• CVE-2020-9602
  high
• CVE-2020-9606
  critical
• CVE-2020-9603
  high
• CVE-2020-9599
  critical
• CVE-2020-9611
  high
• CVE-2020-9594
  critical
• CVE-2020-9614
  critical
• CVE-2020-9608
  high
• CVE-2020-9610
  high
• CVE-2020-9596
  critical
• CVE-2020-9601
  critical
• CVE-2020-9600
  critical
• CVE-2020-9605
  critical
• CVE-2020-9592
  critical
• CVE-2020-9609
  high
• CVE-2020-9597
  critical
• CVE-2020-9612
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com