Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. Memory address leak vulnerability can be exploited to obtain sensitive information.
2. Out of bounds read  vulnerability can be exploited to obtain sensitive information.
3. Out of bounds write vulnerability can be exploited to execute arbitrary code.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer overflow vulnerability can be exploited to execute arbitrary code.
6. Memory corruption vulnerability can be exploited to execute arbitrary code.
7. Insecure library loading (DLL hijacking) vulnerability can be exploited to gain privileges.
8. Stack-based buffer overflow vulnerability can be exploited to execute arbitrary code.

Fiches de renseignement originales

• APSB20-13

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

Liste CVE

• CVE-2020-3800
  warning
• CVE-2020-3804
  warning
• CVE-2020-3795
  critical
• CVE-2020-3793
  critical
• CVE-2020-3792
  critical
• CVE-2020-3805
  critical
• CVE-2020-3807
  critical
• CVE-2020-3801
  critical
• CVE-2020-3797
  critical
• CVE-2020-3802
  high
• CVE-2020-3803
  warning
• CVE-2020-3799
  critical
• CVE-2020-3806
  warning

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com