KLA12283
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A uncontrolled search path element vulnerability can be exploited to execute arbitrary code.
2. A NULL pointer dereference vulnerability can be exploited to cause denial of service.
3. A use after free vulnerability can be exploited to execute arbitrary code.
4. An out of bounds write vulnerability can be exploited to cause denial of service.
5. A heap based buffer overflow vulnerability can be exploited to execute arbitrary code.
6. An out of bounds read vulnerability can be exploited to cause denial of service.
7. A type confusion vulnerability can be expoited to execute arbitrary code.
8. A stack based buffer overflow vulnerability can be exploited to execute arbitrary code.
9. An information exposure vulnerability can be exploited to obtain sensitive information.
10. An out of bounds read vulnerability can be exploited to obtain sensitive information.
11. An use after free vulnerability can be exploited to execute arbitrary code.

Adobe Acrobat 2020 Classic earlier than 2020.004.30015
Adobe Acrobat 2017 Classic earlier than 2017.011.30202
Adobe Acrobat Reader 2020 Classic earlier than 2020.004.30015
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30202
Adobe Acrobat DC Continuous earlier than 2021.007.20091
Adobe Acrobat Reader DC Continuous earlier than 2021.007.20091

Update to the latest version
Download Adobe Acrobat Reader DC

APSB21-55