KLA11991
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Обновлено: 16/11/2020
Дата обнаружения
03/11/2020
Уровень угрозы
High
Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

  1. Signature verification bypass vulnerability can be exploited to gain privileges.
  2. Heap-based buffer overflow vulnerability can be exploited to execute arbitrary code.
  3. Out-of-bounds write vulnerability can be exploited to execute arbitrary code.
  4. Signature validation bypass vulnerability can be exploited to gain privileges.
  5. Security feature bypass vulnerability can be exploited to obtain sensitive information and cause denial of service.
  6. Use-after-free vulnerability can be exploited to execute arbitrary code.
  7. Race Condition vulnerability can be exploited to gain privileges.
  8. Improper access control vulnerability can be exploited to gain privileges.
  9. Out-of-bounds read vulnerability can be exploited to obtain sensitive information.
  10. Improper input validation vulnerability can be exploited to obtain sensitive information.
  11. Use-after-free vulnerability can be exploited to obtain sensitive information.
  12. Improper input validation vulnerability can be exploited to execute arbitrary code.
Пораженные продукты

Adobe Acrobat DC Continuous earlier than 2020.013.20064
Adobe Acrobat 2020 Classic earlier than 2020.001.30010
Adobe Acrobat 2017 Classic earlier than 2017.011.30180
Adobe Acrobat Reader DC Continuous earlier than 2020.013.20064
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30010
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30180

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB20-67
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
CVE-IDS
Узнай статистику распространения уязвимостей в твоем регионе