KLA12501
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Обновлено: 16/05/2022
Дата обнаружения
12/04/2022
Уровень угрозы
Critical
Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

  1. Out of bounds memory read can be exploited to cause denial of service.
  2. Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
  3. Use after free vulnerability can be exploited to cause denial of service.
  4. Out of bounds memory write can be exploited to cause denial of service.
  5. Out of bounds memory read can be exploited to cause denial of service
  6. Access of Uninitialized Pointer can be exploited to cause denial of service.
  7. Buffer Overflow can be exploited to cause denial of service
  8. Out of bounds read write can be exploited to cause denial of service.
  9. Violation of Secure Design Principles can be exploited to bypass security restrictions.
  10. Heap-based Buffer Overflow can be exploited to cause denial of service.
  11. Missing Support for Integrity Check can be exploited remotely to gain privileges.
Пораженные продукты

Adobe Acrobat 2017 Classic earlier than 17.012.30229
Adobe Acrobat Reader 2017 Classic earlier than 17.012.30229
Adobe Acrobat 2020 Classic earlier than 20.005.30334
Adobe Acrobat Reader 2020 Classic earlier than 20.005.30334
Adobe Acrobat DC Continuous earlier than 22.001.20117
Adobe Acrobat Reader DC Continuous earlier than 22.001.20117

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB22-16
Оказываемое влияние
?
ACE 
[?]

DoS 
[?]

SB 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
Узнай статистику распространения уязвимостей в твоем регионе