Kaspersky ID:
KLA12418
Дата обнаружения:
11/01/2022
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Input validation vulnerability can be exploited to bypass security restrictions.
  2. Use after free vulnerability can be exploited to execute arbitrary code.
  3. Out of bounds write vulnerability can be exploited to execute arbitrary code.
  4. Heap buffer overflow vulnerability can be exploited to execute arbitrary code.
  5. NULL pointer dereference vulnerability can be exploited to cause denial of service.
  6. Security bypass vulnerability can be exploited to bypass security restrictions.
  7. Use after free vulnerability can be exploited to gain privileges.
  8. Use after free vulnerability can be exploited to cause denial of service.
  9. Out of bounds read vulnerability can be exploited to obtain sensitive information.
  10. Memory access vulnerability can be exploited to cause denial of service or execute arbitrary code.
  11. Out of bounds read vulnerability can be exploited to execute arbitrary code.
  12. Access control vulnerability can be exploited to gain privileges.
  13. Integer overflow vulnerability can be exploited to execute arbitrary code.
  14. Access of uninitialized pointer vulnerability can be exploited to execute arbitrary code.
  15. Out of bounds read vulnerability can be exploited to execute arbitrary code or cause denial of service.
  16. Stack buffer overflow vulnerability can be exploited to execute arbitrary code.
  17. Input validation vulnerability can be exploited to cause denial of service.
  18. Out of bounds write vulnerability can be exploited to execute arbitrary code or cause denial of service.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2021-44739
    warning
  • CVE-2021-44701
    high
  • CVE-2021-45068
    high
  • CVE-2021-44708
    critical
  • CVE-2021-44709
    critical
  • CVE-2021-45064
    high
  • CVE-2021-44741
    warning
  • CVE-2021-44714
    warning
  • CVE-2021-45062
    critical
  • CVE-2021-45063
    warning
  • CVE-2021-44713
    warning
  • CVE-2021-44707
    critical
  • CVE-2021-44742
    warning
  • CVE-2021-44710
    critical
  • CVE-2021-45067
    warning
  • CVE-2021-45060
    critical
  • CVE-2021-44702
    warning
  • CVE-2021-45061
    critical
  • CVE-2021-44711
    critical
  • CVE-2021-44705
    critical
  • CVE-2021-44715
    warning
  • CVE-2021-44703
    critical
  • CVE-2021-44706
    critical
  • CVE-2021-44740
    warning
  • CVE-2021-44712
    warning
  • CVE-2021-44704
    critical
  • CVE-2022-24091
    critical
  • CVE-2022-24092
    critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.