The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

🗓️ 01 Feb 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru

Memory after free in Adobe Acrobat and Reader enables arbitrary code execution via crafted PDFs.

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
CNNVD	Adobe Acrobat and Reader 资源管理错误漏洞	11 Jan 202200:00	–	cnnvd
CNVD	Adobe Acrobat/Reader Resource Management Error Vulnerability	25 Jan 202200:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-45062)	11 Jan 202200:00	–	checkpoint_advisories
CVE	CVE-2021-45062	14 Jan 202219:05	–	cve
Cvelist	CVE-2021-45062 Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	14 Jan 202219:05	–	cvelist
EUVD	EUVD-2021-31858	3 Oct 202520:07	–	euvd

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb22-01.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45062
web	www.web.nvd.nist.gov/view/vuln/detail

01 Feb 2022 00:00Current

CVSS 27.2

CVSS 37.8

EPSS0.06899

memory after free arbitrary code execution Adobe Acrobat Acrobat Reader Portable Document Format crafted file vulnerabilities