Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Memory access vulnerability can be exploited to obtain sensitive information.
2. Race condition vulnerability can be exploited to bypass security restrictions.
3. Security vulnerability can be exploited to bypass security restrictions.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer vulnerability can be exploited to execute arbitrary code.
6. Out of bound read vulnerability can be exploited to obtain sensitive information.
7. Stack exhaustion vulnerability can be exploited to cause denial of service.
8. Out of bounds write vulnerability can be exploited to execute arbitrary code.
9. Null pointer vulnerability can be exploited to cause denial of service.
10. Heap overflow vulnerability can be exploited to execute arbitrary code.

Fiches de renseignement originales

• APSB20-24

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

Liste CVE

• CVE-2020-9598
  high
• CVE-2020-9593
  high
• CVE-2020-9615
  high
• CVE-2020-9613
  critical
• CVE-2020-9607
  critical
• CVE-2020-9595
  high
• CVE-2020-9604
  critical
• CVE-2020-9602
  high
• CVE-2020-9606
  critical
• CVE-2020-9603
  high
• CVE-2020-9599
  critical
• CVE-2020-9611
  high
• CVE-2020-9594
  critical
• CVE-2020-9614
  critical
• CVE-2020-9608
  high
• CVE-2020-9610
  high
• CVE-2020-9596
  critical
• CVE-2020-9601
  critical
• CVE-2020-9600
  critical
• CVE-2020-9605
  critical
• CVE-2020-9592
  critical
• CVE-2020-9609
  high
• CVE-2020-9597
  critical
• CVE-2020-9612
  critical

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com