KLA11939
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
Updated: 09/10/2020
Detect date
?
08/11/2020
Severity
?
Warning
Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service, gain privileges, .

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability can be exploited to execute arbitrary code.
  2. An out of bounds write vulnerability can be exploited to execute arbitrary code.
  3. An out of bounds read vulnerability can be exploited to obtain sensitive information.
  4. A security bypass vulnerability can be exploited to bypass security restrictions.
  5. A buffer error vulnerability can be exploited to execute arbitrary code.
  6. An information disclosure vulnerability can be exploited to obtain sensitive information.
  7. A stack exhaustion vulnerability can be exploited to cause denial of service.
  8. A security bypass vulnerability can be exploited to gain privileges.
  9. A memory corruption vulnerability can be exploited to execute arbitrary code.
  10. A memory corruption vulnerability can be exploited to obtain sensitive information.
Affected products

Adobe Acrobat DC Continuous earlier than 2020.012.20041
Adobe Acrobat 2020 Classic earlier than 2020.001.30005
Adobe Acrobat 2017 Classic earlier than 2017.011.30175
Adobe Acrobat 2015 Classic earlier than 2015.006.30527
Adobe Acrobat Reader DC Continuous earlier than 2020.012.20041
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30005
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30175
Adobe Acrobat Reader 2015 Classic earlier than 2015.006.30527

Solution

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories

APSB20-48

Impacts
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

PE 
[?]
Related products
Adobe Acrobat
Adobe Acrobat Reader DC Continuous
Adobe Acrobat Reader DC Classic
Adobe Acrobat DC Continuous
Adobe Acrobat DC Classic
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader
CVE-IDS
?
CVE-2020-97229.3Critical
CVE-2020-96939.3Critical
CVE-2020-97074.3Warning
CVE-2020-97185.0Critical
CVE-2020-96946.8High
CVE-2020-97205.0Critical
CVE-2020-97235.0Critical
CVE-2020-97127.1High
CVE-2020-96989.3Critical
CVE-2020-96974.3Warning
CVE-2020-97195.0Critical
CVE-2020-97034.3Warning
CVE-2020-97215.0Critical
CVE-2020-97175.0Critical
CVE-2020-97009.3Critical
CVE-2020-97146.8High
CVE-2020-97024.3Warning
CVE-2020-97064.3Warning
CVE-2020-97019.3Critical
CVE-2020-96999.3Critical
CVE-2020-97055.0Critical
CVE-2020-97159.3Critical
CVE-2020-97049.3Critical
CVE-2020-96967.1High
CVE-2020-97165.0Critical
CVE-2020-97104.3Warning
CVE-2020-96950.0Unknown
CVE-2020-97130.0Unknown
CVE-2020-97110.0Unknown