Searching
..

Click anywhere to stop

KLA12066
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Обновлено: 25/01/2024
Дата обнаружения
09/02/2021
Уровень угрозы
Critical
Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability can be exploited to execute arbitrary code.
  2. Improper input validation vulnerability can be exploited to obtain sensitive information.
  3. Out of bounds read vulnerability can be exploited to gain privileges.
  4. Integer overflow vulnerability can be exploited to execute arbitrary code.
  5. Path traversal vulnerability can be exploited to execute arbitrary code.
  6. Buffer overflow vulnerability can be exploited to execute arbitrary code.
  7. An out of bound write vulnerability can be exploited to execute arbitrary code.
  8. NULL pointer dereference vulnerability can be exploited to obtain sensitive information.
  9. Buffer overflow vulnerability can be exploited to cause denial of service.
  10. Improper access control vulnerability can be exploited to gain privileges.
  11. Use after free vulnerability can be exploited to obtain sensitive information.
  12. Heap-based buffer overflow vulnerability can be exploited to execute arbitrary code.
  13. Security bypass vulnerability can be exploited to bypass security restrictions.
Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Пораженные продукты

Adobe Acrobat DC Continuous earlier than 2021.001.20135
Adobe Acrobat 2020 Classic earlier than 2020.001.30020
Adobe Acrobat 2017 Classic earlier than 2017.011.30190
Adobe Acrobat Reader DC Continuous earlier than 2021.001.20135
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30020
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30190

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB21-09
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
CVE-IDS
CVE-2021-210358.8Critical
CVE-2021-210604.6Warning
CVE-2021-210344.3Warning
CVE-2021-210367.8Critical
CVE-2021-210377.8Critical
CVE-2021-210587.8Critical
CVE-2021-210288.8Critical
CVE-2021-210627.8Critical
CVE-2021-210447.8Critical
CVE-2021-210417.8Critical
CVE-2021-210637.8Critical
CVE-2021-210576.6High
CVE-2021-210338.8Critical
CVE-2021-210387.8Critical
CVE-2021-210463.3Warning
CVE-2021-210458.2Critical
CVE-2021-210613.3Warning
CVE-2021-210178.8Critical
CVE-2021-210407.8Critical
CVE-2021-210397.8Critical
CVE-2021-210426.5High
CVE-2021-210218.8Critical
CVE-2021-210597.8Critical
CVE-2021-210867.8Critical
CVE-2021-210887.8Critical
CVE-2021-285466.5High
CVE-2021-210893.3Warning
CVE-2021-285458.1Critical
CVE-2021-407235.5High
Узнай статистику распространения уязвимостей в твоем регионе