The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to errors in verifying cryptographic signatures. These vulnerabilities allow attackers to circumvent existing security restrictions.

🗓️ 08 Dec 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

PDF viewers and editors have cryptographic signature verification flaws that allow attackers to bypass security restrictions.

Reporter	Title	Published	Views	Family All 28
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
ATTACKERKB	CVE-2020-24439	3 Nov 202023:00	–	attackerkb
Circl	CVE-2020-24439	5 Nov 202022:49	–	circl
CNVD	Adobe Acrobat and Reader Signature Verification Bypass Vulnerability	4 Nov 202000:00	–	cnvd
CVE	CVE-2020-24439	5 Nov 202019:32	–	cve
Cvelist	CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass	5 Nov 202019:32	–	cvelist
EUVD	EUVD-2020-17159	7 Oct 202500:30	–	euvd

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-67.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24439
web	www.web.nvd.nist.gov/view/vuln/detail

08 Dec 2020 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 21

CVSS 32.8

EPSS0.00631

Portable Document Format cryptographic signatures signature verification security restrictions document format viewers document format editors Adobe Acrobat attackers bypass