KLA12230
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Updated: 07/27/2021
Detect date
?
07/13/2021
Severity
?
Critical
Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. OS command injection vulnerability can be exploited to execute arbitrary code.
  2. Use after free vulnerability can be exploited to execute arbitrary code.
  3. Information disclosure vulnerability can be exploited to cause denial of service or execute arbitrary code.
  4. Code execution vulnerability can be exploited to execute arbitrary code.
  5. NULL Pointer Dereference vulnerability can be exploited to dcause denial of service.
  6. Out of bounds read vulnerability can be exploited to to gain privileges.
  7. Buffer overflow vulnerability can be exploited to execute arbitrary code.
  8. Type confusion vulnerability can be exploited to execute arbitrary code.
  9. Out of bounds write vulnerability can be exploited to cause denial of service or execute arbitrary code.
  10. Out of bounds read vulnerability can be exploited to obtain sensitive information.
  11. Type confusion vulnerability can be exploited to cause denial of service
Affected products

Adobe Acrobat 2020 Classic earlier than 2020.004.30006
Adobe Acrobat 2017 Classic earlier than 2017.011.30199
Adobe Acrobat Reader 2020 Classic earlier than 2020.004.30006
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30199
Adobe Acrobat DC Continuous earlier than 2021.005.20058
Adobe Acrobat Reader DC Continuous earlier than 2021.005.20058

Solution

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories

APSB21-51

Impacts
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

PE 
[?]
Related products
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
CVE-IDS
?
CVE-2021-286340.0Unknown
CVE-2021-286390.0Unknown
CVE-2021-286440.0Unknown
CVE-2021-286360.0Unknown
CVE-2021-359800.0Unknown
CVE-2021-359830.0Unknown
CVE-2021-359850.0Unknown
CVE-2021-359880.0Unknown
CVE-2021-359810.0Unknown
CVE-2021-286380.0Unknown
CVE-2021-359870.0Unknown
CVE-2021-359840.0Unknown
CVE-2021-286410.0Unknown
CVE-2021-286350.0Unknown
CVE-2021-286400.0Unknown
CVE-2021-286430.0Unknown
CVE-2021-286420.0Unknown
CVE-2021-286370.0Unknown
CVE-2021-359860.0Unknown
Find out the statistics of the vulnerabilities spreading in your region