KLA48835
Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Обновлено: 29/09/2023
Дата обнаружения
11/04/2023
Уровень угрозы
Critical
Описание

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

  1. Input validation vulnerability can be exploited to execute arbitrary code
  2. Out of bounds read vulnerability can be exploited to execute arbitrary code.
  3. Use after free vulnerability can be exploited execute arbitrary code.
  4. Out of bounds write vulnerability can be exploited to execute arbitrary code.
  5. Input validation vulnerability can be exploited to execute arbitrary code.
  6. Improper Access Control vulnerability can be exploited to bypass security restrictions.
  7. Integer Underflow (Wrap or Wraparound) vulnerability can be exploited to execute arbitrary code
  8. Improper Access Control vulnerability can be exploited to bypass security restrictions
  9. Out of bounds read vulnerability can be exploited to obtain sensitive information.
  10. Elevation of privilege vulnerability can be exploited remotely to gain privileges.
Пораженные продукты

Adobe Acrobat DC Continuous earlier than 23.001.20143
Adobe Acrobat Reader DC Continuous earlier than 23.001.20143
Adobe Acrobat 2020 Classic earlier than 20.005.30467
Adobe Acrobat Reader 2020 Classic earlier than 20.005.30467

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB23-24
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat DC Continuous
Adobe Acrobat Reader 2020
Adobe Acrobat 2020
CVE-IDS
CVE-2023-264055.0Warning
CVE-2023-264255.0Warning
CVE-2023-264175.0Warning
CVE-2023-264195.0Warning
CVE-2023-264235.0Warning
CVE-2023-263955.0Warning
CVE-2023-264075.0Warning
CVE-2023-264225.0Warning
CVE-2023-264085.0Warning
CVE-2023-264245.0Warning
CVE-2023-264215.0Warning
CVE-2023-264185.0Warning
CVE-2023-264065.0Warning
CVE-2023-263975.0Warning
CVE-2023-264205.0Warning
CVE-2023-263965.0Warning
Узнай статистику распространения уязвимостей в твоем регионе