KLA12501
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. Out of bounds memory read vulnerability can be exploited to cause denial of service.
2. Use after free vulnerability can be exploited to execute arbitrary code.
3. Use after free vulnerability can be exploited to cause denial of service.
4. Out of bounds memory write vulnerability can be exploited to execute arbitrary code.
5. Uninitialized pointer vulnerability can be exploited to execute arbitrary code.
6. Buffer overflow vulnerability can be exploited to execute arbitrary code.
7. Out of bounds memory read vulnerability can be exploited to execute arbitrary code.
8. Secure design principles vulnerability can be exploited to execute arbitrary code.
9. Heap-based buffer overflow vulnerability can be exploited to execute arbitrary code.
10. Integrity check vulnerability can be exploited remotely to gain privileges.
11. Use after free vulnerability can be exploited execute arbitrary code.
12. Out of bounds read vulnerability can be exploited to obtain sensitive information.
13. Use after free vulnerability can be exploited obtain sensitive information.
14. Out of bounds write vulnerability can be exploited to execute arbitrary code.

The following public exploits exists for this vulnerability:

https://github.com/mubix/CVE-2022-28251-POC

Adobe Acrobat Reader DC Continuous earlier than 22.001.20117
Adobe Acrobat DC Continuous earlier than 22.001.20117
Adobe Acrobat Reader 2020 Classic earlier than 20.005.30334
Adobe Acrobat 2020 Classic earlier than 20.005.30334
Adobe Acrobat Reader 2017 Classic earlier than 17.012.30229
Adobe Acrobat 2017 Classic earlier than 17.012.30229

Update to the latest version
Download Adobe Acrobat Reader DC