Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. Memory address leak vulnerability can be exploited to obtain sensitive information.
2. Out of bounds read  vulnerability can be exploited to obtain sensitive information.
3. Out of bounds write vulnerability can be exploited to execute arbitrary code.
4. Use after free vulnerability can be exploited to execute arbitrary code.
5. Buffer overflow vulnerability can be exploited to execute arbitrary code.
6. Memory corruption vulnerability can be exploited to execute arbitrary code.
7. Insecure library loading (DLL hijacking) vulnerability can be exploited to gain privileges.
8. Stack-based buffer overflow vulnerability can be exploited to execute arbitrary code.

Первичный источник обнаружения

• APSB20-13
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

Список CVE

• CVE-2020-3800
  warning
• CVE-2020-3804
  warning
• CVE-2020-3795
  critical
• CVE-2020-3793
  critical
• CVE-2020-3792
  critical
• CVE-2020-3805
  critical
• CVE-2020-3807
  critical
• CVE-2020-3801
  critical
• CVE-2020-3797
  critical
• CVE-2020-3802
  high
• CVE-2020-3803
  warning
• CVE-2020-3799
  critical
• CVE-2020-3806
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com