KLA12187
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Обновлено: 22/06/2021
Дата обнаружения
11/05/2021
Уровень угрозы
Critical
Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

  1. A buffer overflow vulnerability can be exploited to execute arbitrary code.
  2. A heap buffer overflow vulnerability can be exploited to execute arbitrary code.
  3. An out of bounds read vulnerability can be exploited to cause denial of service or obtain sensitive information.
  4. An out of bounds read vulnerability can be exploited to obtain sensitive information.
  5. An out of bounds read vulnerability can be exploited to execute arbitrary code.
  6. An out of bound write vulnerability can be exploited to execute arbitrary code.
  7. An information disclosure vulnerability can be exploited to gain privileges or obtain sensitive information.
  8. A use after free vulnerability can be exploited to execute arbitrary code.
Пораженные продукты

Adobe Acrobat DC Continuous earlier than 2021.001.20155
Adobe Acrobat 2020 Classic earlier than 2020.001.30025
Adobe Acrobat 2017 Classic earlier than 2017.011.30196
Adobe Acrobat Reader DC Continuous earlier than 2021.001.20155
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30025
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30196

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB21-29
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
CVE-IDS
Узнай статистику распространения уязвимостей в твоем регионе