KLA12586
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Updated: 07/27/2022
Detect date
?
07/12/2022
Severity
?
Critical
Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability in media can be exploited to execute arbitrary code.
  2. Out of bounds memory write vulnerability can be exploited to execute arbitrary code.
  3. Use after free vulnerability in media can be exploited to cause denial of service.
  4. Uninitialized pointer vulnerability can be exploited to execute arbitrary code.
  5. Out of bounds memory read vulnerability can be exploited to cause denial of service.
  6. Out of bounds memory read vulnerability can be exploited to execute arbitrary code.
  7. Type confusion vulnerability can be exploited to execute arbitrary code.
Affected products

Adobe Acrobat 2017 Classic earlier than 17.012.30249
Adobe Acrobat Reader 2017 Classic earlier than  17.012.30249
Adobe Acrobat 2020 Classic earlier than 20.005.30362
Adobe Acrobat Reader 2020 Classic earlier than 20.005.30362
Adobe Acrobat DC Continuous earlier than 22.001.20169
Adobe Acrobat Reader DC Continuous earlier than 22.001.20169

Solution

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories

APSB22-32

Impacts
?
ACE 
[?]

DoS 
[?]
Related products
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
Find out the statistics of the vulnerabilities spreading in your region